Abstract: Systems and methods for publishing datasets are provided herein. According to some embodiments, methods for publishing datasets may include receiving a request to publish a dataset to at least one of an internal environment located within a secured zone and an external environment located outside the secured zone, the request comprising at least one selection criteria, selecting the dataset based upon the at least one selection criteria, the dataset being selected from an index of collected datasets, and responsive to the request, publishing the dataset to at least one of the internal environment and the external environment.

Abstract: A method and apparatus for reducing unauthorized access of an information stream. The information stream is received at a node along a path to a destination node. The information stream comprises information bits and quantum bits that are interspersed with each other. A portion of the quantum bits are examined at the node along the path. An occurrence of unauthorized access to the information stream is indicated when an original entangled state of the portion of the quantum bits is absent.

Abstract: A method and system for authenticating a user to provide access to a secure application configured on a mobile device are disclosed. The method includes receiving an input from the user. The input is associated with a plurality of parameters. The method includes extracting a biometric pattern based on the input. The biometric pattern may be generated from the plurality of parameters associated with the input. The method may include comparing the biometric pattern with a plurality of reference patterns. The plurality of reference patterns are pre-defined by an owner of the mobile device. Furthermore, the method may include authenticating the user when the biometric pattern matches a reference pattern associated with the secure application from the plurality of reference patterns. Moreover, the method includes allowing the user to access the secure application, based on the authentication.

Abstract: An access method for accessing a protected communication service via a public communication network by using a secure communication network, whereby the secure communication network is based on user groups, including defining an access group having access to the communication service based on the user groups of the secure communication network, generating a group key for all members of the access group, providing the group key to a member of the access group via the secure communication network, and accessing the communication service via the public communication network using the group key, is provided. A communication system including a secure communication network based on user groups, a public communication network, a protected communication service, and an access server for managing access rights to the communication service, whereby the communication system implements the above method is further provided.

Abstract: Techniques are provided for controlling access to an application. A first request to use an application may be received from a first user and an application access rule associated with the first user may be accessed. Based on the application access rule, it may be determined that permission is required for the first user to use the application. In response, a second request may be sent to a second user requesting permission for the first user to use the application and a response to the second request may be received from the second user. The response may include authorization information used in determining whether the first user has permission from the second user to use the application. In response to receiving the response from the second user, the first request to use the application initiated by the first user may be handled based on the authorization information.

Abstract: Non-harmful data mimicking computer network attacks may be inserted in a computer network. Anomalous real network connections may be generated between a plurality of computing systems in the network. Data mimicking an attack may also be generated. The generated data may be transmitted between the plurality of computing systems using the real network connections and measured to determine whether an attack is detected.

Abstract: According to a method and system for real-time malware detection based on web browser plugin, the method and system may connect a web server of a web site through a web browser module, execute a security module through a browser plugin of the web site, update a database for a browser cache of the web site from the web server by the security module, cache a web content of the web site from the web server, match cache data of the web content with the database, and warn about the web content if data matched with the cache data of the web content does not exist in the database.

Abstract: An apparatus and a method for an attack source traceback capable of tracing back an attacker, that is, an attack source present behind a command and control (C&C) server in a cyber target attack having non-connectivity over a transmission control protocol (TCP) connection are disclosed. The apparatus for the attack source traceback includes: a server information extracting unit detecting an attack for a system, which is generated via a server to thereby extract information on the server; a traceback agent installing unit installing a traceback agent in the server based on the information on the server; and a traceback unit finding an attack source for the system by analyzing network information of the server obtained by the traceback agent.

Abstract: In one embodiment, a system includes a processor to receive network flows, for each of one of a plurality of event-types, compare each one of the network flows to a flow-specific criteria of the one event-type to determine if the one network flow satisfies the flow-specific criteria, for each one of the event-types, for each one of the network flows satisfying the flow-specific criteria of the one event-type, assign the one network flow to a proto-event of the one-event type, test different combinations of the network flows assigned to the proto-event of the one event-type against aggregation criteria of the one event-type to determine if one combination of the network flows assigned to the proto-event of the one event-type satisfies the aggregation criteria for the one event-type and identifies an event of the one event-type from among the network flows of the proto-event. Related apparatus and methods are also described.

Abstract: A device for detecting network traffic content is provided. The device includes a first input port configured to receive one or more signatures, each of the one or more signatures associated with content desired to be detected, a second input port configured to receive data associated with network traffic content. The device also includes a processor configured to process the one or more signatures and the data to determine whether the network traffic content matches the content desired to be detected, and an output port configured to couple the device to a computer system of an intended recipient of the network traffic content. The output port passes the network traffic content to the computer system when it is determined that the network traffic content does not match the content desired to be detected.

Abstract: A data processing system comprises a security control computer performing operations comprising: receiving, an advertising exchange network computer, advertising presentation data indicating presentations of advertisements to particular browsers that have browsed to particular websites; determining, based upon detection data, whether the particular websites are associated with network attacks or malware; in response, storing transit data specifying computers that have visited the particular web sites and using the transit data to determine a plurality of particular web pages to inspect for threats; based on a hierarchical structure of the particular web pages and without consideration of content of the particular web pages, identifying one or more features, of links in the particular web page or files referenced in the particular web pages, that indicate one or more security threats in the web pages; and determining remediation measures to remediate security threats that are identified in one of the particula

Abstract: Application malware filtering for advertising networks is disclosed. For example, techniques for providing a system and process for detecting malicious ad content (e.g., or other undesirable ad content) distributed by advertising (ad) networks are disclosed. In some embodiments, application (“app”) malware filtering for advertising networks includes receiving ad content; processing the ad content; and automatically determining whether the ad content is associated with a malicious app.

Abstract: Aspects of the present invention provide a device, method and system which utilize hardware-based granular evaluation of industrial control protocol packets to withstand traffic storms. In an embodiment, packet evaluation circuitry coupled to a port may be adapted to evaluate one or more protocol fields contained in each inbound packet before switching circuitry can send the inbound packet to the proper destination. The inbound packet may be sent by the switching circuitry if it is a particular message, or may be selectively inhibited from being sent by the switching circuitry if the inbound packet does not contain the particular message for being sent and if the total number of bytes of the inbound packet type exceeds a threshold for the outbound port during a given period of time. As such, critical industrial applications may continue to operate in the presence of a traffic storm.

Abstract: A policy arbitration method comprises: entering a user policy in which a privacy information holder describes at least one rule that is a pair of a data type of privacy information possessed by the privacy information holder and the way to handle the data type; generating, using the user policy and a service policy set that includes at least one service policy in which a privacy information user describes at least one rule that is a pair of a data type of the privacy information and the way to handle the data type, a ranking of the service policy according to the degree of divergence between the user policy and the service policy; and displaying the service policy ranking on a privacy information holder terminal.

Abstract: Asset security compliance data ensuring defined asset security policies are applied to the creation and/or operation of assets to be used to implement an application and application deployment security compliance data for ensuring compliance with one or more application deployment security policies associated with the deployment of assets used to implement the application is generated. The asset security compliance data is then used to ensure each asset used to implement the application is created and used in compliance with asset security policies and the application deployment security compliance data is used to ensure that each asset used to implement the application is deployed in compliance with the application deployment security policies.

Abstract: Techniques allow runtime extensions to a whitelist that locks down a computational system. For example, executable code is not only subject to whitelist checks that allow (or deny) its execution, but is also subject to checks that determine whether a whitelisted executable is itself trusted to introduce further executable code into the computational system in which it is allowed to run. In general, deletion and/or modification of instances of code that are already covered by the whitelist are also disallowed in accordance with a security policy. Accordingly, an executable that is trusted may be allowed to delete and/or modify code instances covered by the whitelist. In general, trust may be coded for a given code instance that seeks to introduce, remove or modify code.

Abstract: A multimedia call from an originating device is provided. At least one session may be created at an application server in response to receiving the multimedia call. An endpoint may be created within the session for communication between the originating device and the application server. The endpoint may be a composite endpoint for communication between the originating device and two or more terminating devices. The composite endpoint may be include two or more logical endpoints for communicating with and respectively associated with the two terminating devices. A portion or more of the multimedia call may be delivered from the application server to each of the terminating devices using the logical endpoint associated with each terminating device.

Abstract: An arrangement to direct a packet sent out from an arbitrary apparatus connected to a network to a predetermined authentication server without changing the configuration of a computer network. A packet transmitted from apparatus, such as a personal computer, newly connected to the network, is guided to an authentication server via communication control apparatus. The communication control apparatus replaces a MAC address of the destination addresses of another server, which is included in the ARP cache of the personal computer, with the MAC address of the communication control apparatus to guide the packet from the personal computer to the communication control apparatus. The communication control apparatus further transmits the received packet to a predetermined authentication server.

Abstract: A telephony application such as an interactive voice response (“IVR”) needs to identify quickly the nature of the call (e.g., whether it is a person or machine answering a call) in order to initiate an appropriate voice application. Conventionally, the call stream is sent to a call-progress analyzer (“CPA”) for analysis. Once a result is reached, the call stream is redirected to a call processing unit running the IVR according to the analyzed result. The present scheme feeds the call stream simultaneous to both the CPA and the IVR. The CPA is allowed to continue analyzing and outputting a series of analysis results until a predetermined result appears. In the meantime, the IVR can dynamically adapt itself to the latest analysis results and interact with the call with a minimum of delay.

Abstract: Methods and systems for online counseling sessions conducted over the Internet are disclosed. In some configurations, a method for remotely conducting counseling sessions between a client and an expert using an IP-based network includes providing a website accessible to the network wherein the expert and a client both have access to the website. In such configurations, upon accessing and logging into the website, the client is permitted to search a database for online experts and select an appropriate expert for a counseling session. In some configurations, the client initially completes various intake and/or registration forms in a virtual waiting room, wherein such forms are customized per the relevant expert. The method continues as an expert remotely conducts a counseling session with the client via remote means, including video conferencing. Following the counseling session, the client is automatically returned to the virtual waiting room and provided with subsequent counseling based options.

Abstract: Several different embodiments of a segmented object storage system are described. The object storage system divides files into a number of object segments, each segment corresponding to a portion of the object, and stores each segment individually in the cloud storage system. The system also generates and stores a manifest file describing the relationship of the various segments to the original data file. Requests to retrieve the segmented file are fulfilled by consulting the manifest file and using the information from the manifest to reconstitute the original data file from the constituent segments. Modifying, appending to, or truncating the object is accomplished by manipulating individual segments and the manifest file. In further embodiments, manipulation of the individual object segments and/or the manifest is used to implement copy-on-write, snapshotting, software transactional memory, and peer-to-peer transmission of the large file.

Abstract: In one aspect, a system for providing a user interface including recommended content in response to an endorsement input is described. The system includes a processor and a memory storing instructions that, when executed, causes the system to: receive an input from a first user; determine that the input is related to an endorsement of a first content item from a first source; determine a social correlation between the first content item and a second content item from a second source, determine a source correlation between the first source and the second source, determine recommended content using the social correlation and the source correlation and provide the recommended content to the first user.

Abstract: Systems, method and apparatus are provided for searching, sensing, discovering, screening, enabling awareness, alerting, sharing, sending, receiving, buying, selling, and otherwise transmitting stories, content, interests, data, goods and services among known and unknown devices in a communication network. Humans have a core desire to communicate and share with those around them—both nearby and around the globe—to enhance their individual, social and shared experiences. Social networks and related technologies have provided their subscribers with new technologies to share their stories with their friends and certain third-parties, but are limited in two crucial respects: they require prior membership, subscription or enrollment; and, in order to execute communications with friends and certain third parties, social networks require use of both (a) a user's existing contact information, and (b) the social network's platform.

Abstract: A system and method for maintaining associations within a social network for a user are provided. A device proximate a user device is identified. It is determined whether the identified device is associated with an entity having a pre-established association with a user of the user device within the social network. The user is associated with the entity within the social network if the identified device is not associated with an entity having a pre-established association with the user. The user-entity association is maintained within the social network based upon whether the entity and the user device remain proximate.

Abstract: In one example, a method includes receiving, by a first computing device and from a second computing device, an image comprising an object. A user may be associated with a social networking service and the second computing device. The method further includes selecting a social group associated with the user in the social networking service. The selection may be based at least in part on one or more characteristics associated with the object. The method also includes sending, by the first computing device to the second computing device, an indication of the social group selected by the first computing device.

Abstract: Aspects of the present disclosure involve systems, methods, computer program products, and the like, for collaboration conferencing with multiple participants over a communications network, and more specifically for a conferencing routing service for managing and routing collaboration participants. In one embodiment, the conferencing routing service may maintain a database of information or preferences associated with the conference requester and attempt to select a conference bridge based on the requester's information. Further, the conferencing routing service may receive performance information from a plurality of conference bridges that are able to conduct the collaboration conference and select a conference bridge in response to the performance information.

Abstract: A computer-implemented method, computer program product, and computing system is provided for managing communication traffic relaying in a multiparty communication session. In an implementation, a method may include receiving a request from a first computing device to join a multiparty communication session. The method may also include associating the first computing device with a second computing device for the multiparty communication session, the second computing device participating in the multiparty communication session via a multipoint control unit. The method may further include relaying communication traffic for the multiparty communication session from the multipoint control unit to the first computing device by the second computing device.

Abstract: Some demonstrative embodiments include apparatuses, systems and/or methods of supporting streaming over a Protocol Adaptation Layer (PAL). For example, an apparatus may include a first PAL communication unit to communicate PAL traffic with a second PAL communication unit over a communication link, the PAL traffic comprising traffic of a PAL connection, over a PAL, between a first device and a second device, the PAL is above a layer of the communication link, the PAL traffic comprising data to be communicated between the first device and one or more endpoints via the second device, wherein the first PAL communication unit is to communicate an endpoint open stream request and an endpoint open stream response with the second PAL communication unit over the communication link.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for requesting potentially missing fragments in a media stream index are described in this specification. In one aspect, a method includes receiving a fragmented media stream index at a client system, where the media stream index includes a list of sequentially arranged fragment identifiers. Fragments listed in the media stream index can be requested from a server system. Fragment identifiers that are potentially missing in the media stream index can be identified based, at least in part, on a determined naming convention indicating the sequential arrangement of the fragment identifiers. Fragments can be requested based on the potentially missing fragment identifiers and processed for display when received.

Abstract: A method, system and a computer program product. The method may include: receiving a plurality of chunk requests from clients that are hosted on user devices; generating, in response to a first chunk request of the plurality of chunk requests, a first set of chunk requests for receiving different bit rate versions of the first chunk; sending to a media streamer the first set of chunk requests; receiving, from the media streamer, the different bit rate versions of the first chunk; generating a first new chunk, based on bit rate allocated for streaming of a media flow to the first client; wherein the first new chunk comprises a plurality of frames selected from at least two bit rate versions of the first chunk; and assisting in streaming to the first client, the first new chunk.

Abstract: A digital video system including one or more video cameras and a video server connected to the one or more video cameras is disclosed. In an illustrative embodiment, the video server includes a computer having a central processing unit (CPU) for executing machine instructions and a memory for storing machine instructions that are to be executed by the CPU. The machine instructions when executed by the CPU implement a number of functions including receiving one or more trigger event conditions, receiving data relating to the one or more trigger event conditions, generating a trigger event message based on a comparison of the one or more trigger event conditions and the data relating to the one or more trigger event conditions, and transmitting the trigger event message.

Abstract: A client device presents streaming media and includes a stream manager for controlling streams, a request accelerator for making network requests for content, a source component coupled to the stream manager and the request accelerator for determining which requests to make, a network connection, and a media player. A process for rate estimation is provided that will react quickly to reception rate changes. The rate estimator can use an adaptive windowed average and take into account the video buffer level and the change in video buffer level in a way so to guarantee that the rate adjusts fast enough if there is a need, while keeping the windowing width large (and thus the measurement variance) large. A guarantee might be that when a rate drop or rise happens, the estimator adjusts its estimate within a time proportional to a buffer drain rate or buffer fill level.

Abstract: Technology for decomposing an application into fragments and streaming the application in fragments is disclosed herein. According to at least one embodiment, a computer-implemented method includes steps of determining multiple application fragments of a computer application, wherein each application fragment of the application fragments includes a code to present at least one interface of the computer application; storing the application fragments at a storage device; generating a resource dependency data structure, wherein for each specific application fragment of the application fragments, the resource dependency data structure includes identifications of resources that are needed for running the specific application fragment; and streaming, via a network component, at least one application fragment of the application fragments to a computing device.

Abstract: The present invention relates to a high picture quality video streaming service method and system. The high picture quality video streaming service system according to the present invention includes: a content server for generating a first encoding video by encoding an original video with at a constant bit rate, generating a second encoding video by encoding the original video by using 1/N of the length of a first encoding video Group Of Pictures (GOP) and 1/N of a frame rate with constant Quantization Parameters, generating a streaming video by using the first encoding video and the second encoding video, and downloading the first encoding video and transmitting the streaming video in real time; and a user terminal for downloading and playing the first encoding video, or generating and playing a video for playback by recombining frames of the first encoding video and frames of the streaming video.

Abstract: This invention relates to a system for adaptive streaming in a multipath environment comprising a plurality of servers being respectively capable of transmitting multimedia content in a RTP/RTSP environment through a respective data path to a client, wherein the client includes a controller means being capable of probing each of said data paths in order to determine a respective bandwidth associated to each of said data paths and to request a chunk of said multimedia content for each of said servers according to the respective bandwidth. In addition, the invention relates to a method for adaptive streaming in a multipath environment.

Abstract: A method and system for switching between a unicast streaming source and a multicast streaming source of over-the-top (OTT) streams are provided. The method includes retrieving an OTT unicast stream from the unicast streaming source and an OTT multicast stream from the multicast streaming source, wherein there is a time delay between the OTT unicast stream and the OTT multicast stream; synchronizing the OTT unicast stream and the OTT multicast stream to compensate for the time delay; selecting one of the OTT unicast stream and the OTT multicast stream; and switching to a streaming source of the selected OTT stream.

Abstract: Disclosed are various embodiments for recommending content for users. A user is associated with a user preferred character that is represented in a first network content. A library is referenced to identify a recommended character based at least upon the user preferred character, the recommended character being represented in a second network content, the library associating the preferred character to the recommended character according to a relationship score. A recommendation is sent for presentation of the second network content.

Abstract: In an information generating device, a plurality of division information acquisition requests obtained by dividing an information acquisition request are transmitted through a web server, division response information corresponding to the division information acquisition requests is acquired from the information generating device through the web server, output information is generated using the acquired division response information, and thus it is possible to relieve concentration of load in the web server and to reliably perform screen display in the web browser.

Abstract: If an execution target application is an application with a high load for a client terminal, a mode switching unit switches an execution system from a simplex processing mode to a distributed processing mode. On the other hand, upon receiving a switching notification for switching the execution system to the simplex processing mode from a server, the mode switching unit causes a distributed display processing unit to stop display processing for the application and sets the execution system of the application to the simplex processing mode.

Abstract: Embodiments of the invention provide a method, system and computer program product for embedding a global barrier and global interrupt network in a parallel computer system organized as a torus network. The computer system includes a multitude of nodes. In one embodiment, the method comprises taking inputs from a set of receivers of the nodes, dividing the inputs from the receivers into a plurality of classes, combining the inputs of each of the classes to obtain a result, and sending said result to a set of senders of the nodes. Embodiments of the invention provide a method, system and computer program product for embedding a collective network in a parallel computer system organized as a torus network. In one embodiment, the method comprises adding to a torus network a central collective logic to route messages among at least a group of nodes in a tree structure.

Abstract: A system and method for remote peripheral control are presented. Network access protocols are detected for accessing a network from a server device. An application program is activated on the server device in response to an application activation command from a peripheral device. The application program is interfaced with server application commands from the peripheral device using the network access protocols. A remote server interface control module is interfaced with the server device via the network access protocols. The application program on the server device is activated with the application activation command. The application program is controlled with the server application commands using the network access protocols, and a custom user interface configured to the application program is provided for a user to control the application program without configuring network access to the server device.

Abstract: Provided are techniques for, under control of an agent: receiving a request from a first database client to access a service from a set of services, wherein the agent is associated with the service; receiving a request from a second database client to access the service, wherein the agent is shared by the first database client and the second database client; combining information from the first database client and the second database client; and sending the combined information to the service using a single physical connection in a client-side Client Management Extension (CMX) connection, wherein the first database client and the second database client share the single physical connection.

Abstract: A distributed system may implement dynamic specification auditing. A specification for a distributed system may be maintained in a machine readable format. Specification assertion agents corresponding to different components of the distributed system may request and receive the specification in order to verify whether tasks performed by the respective component satisfy the specification. The specification assertion agents may then send assertions of the success or failure of the component to be stored in order to verify compliance with specification. Various reports may be generated which identify failures or components in the distributed system that are not reporting assertions.

Abstract: The present disclosure relates generally to the field of logical movement of data objects. In various examples, the logical movement of data objects may reduce or eliminate network hotspots (e.g., avoid formation of hotspots, remove existing hotspots and/or reduce the magnitude of hotspots). In various examples, the logical movement of data objects may be implemented in the form of systems, methods and/or algorithms.

Abstract: A mechanism controls global synchronization, or registration floods, that may result when a large number of endpoints in a Voice over Internet Protocol (VoIP) network such as an Internet Protocol Multimedia Subsystem (IMS) come online simultaneously after a catastrophic failure. The mechanism allows the Domain Name System (DNS) infrastructure to efficiently control the overload condition by registering user end points with backup border elements, and by staggering and by randomizing the time-to-live (TTL) parameter in registrations with backup border elements.

Abstract: Telemetry data from a plurality of peer computers of a peer-to-peer network is aggregated via a computer network. Each of the plurality of peer computers sends telemetry data related to transfer of a digital content item within the peer-to-peer network. A content-acquisition request querying for a recommended content source to provide a first digital content item is received from a first peer computer of the peer-to-peer network via the computer network. A response to the content-acquisition request is sent to the first peer computer via the computer network. The response identifies a second peer computer of the peer-to-peer network that has the first digital content item as the recommended content source. The second peer computer is selected according to a peer selection metric derived from the telemetry data aggregated from the plurality of peer computers.

Abstract: A method for sharing a content item from an originator with one or more first-order recipients may include receiving a first grouping of one or more first-order recipients that is selected to receive the content item from the originator. The method may also include receiving one or more distribution objectives from the originator. The method may also include selecting a first share time for the content item. The method may also include predicting a first predicted grouping of second-order recipients derived from the first grouping of first-order recipients for the content item at the first share time. The method may also include determining whether the distribution objectives are met for the content item. The method may also include sharing the content item at the first share time in response to the distribution objectives being met for the content item.

Abstract: A method of securely distributing and storing content may include receiving user content and identifying a number of storage servers that are configured to receive portions of the user content. The method may also include dissecting the user content into content portions for storage in the storage servers. The number of content portions may be selected to be equal to the identified number of storage servers, and the user content may be dissected into the content portions using a randomized dissection pattern. The method may additionally include transmitting each of the plurality of content portions to separate storage servers. Each of the storage servers may be independent from the transmitting computer system and from each other. Each of the storage servers may be operated according to a common protocol, such that each of the storage servers can store any of the content portions.

Abstract: A system and method for monitoring apps in a vehicle or in a smartphone to reduce driver distraction is disclosed. A controller operating inside or in combination with the head unit of the vehicle or operating inside or in combination with the smartphone may monitor operation of the vehicle, and generate alerts indicative of operation of the vehicle (such as an alert indicative that the vehicle is operating at a predetermined speed). In response to the alert, the operation of the app in the vehicle or in the smartphone may be modified.

Abstract: A system for managing home appliances can provide a push service with respect to status information of a home appliance. Further, push service can be stably implemented using a response message to a push message. This can allow home appliances to be managed efficiently.