Abstract: A method comprising: S1. dividing attack and defense processes associated with a computer network system into first one or more single-node attacks and second one or more link attacks based on attack granularity; S2. determining one or more single-node attack parameters associated with the computer network system based on configuration of the computer network system; S3. calculating (1) success probability and (2) time length of a single node attack by applying GSPN theory to mathematically analyze the determined one or more single-node attack parameters; S4. based on the success probability of the attacking single node as a parameter, using the Markov chain and the Martingale theory to calculate an average number of steps required for a successful link attack; and S5. calculating a total theoretical average attack time based on the average number of steps required for a successful link attack and the time length of a single node attack.

Abstract: Computer networks, particularly larger networks, may have various issues and vulnerabilities. By collecting network traffic data from a network in multiple different locations, then analyzing correlations in this data, performance issues and security risks can be uncovered. Techniques disclosed herein can help mitigate risks posed by malware, mitigate network performance issues, and also help provide a detailed network map of devices, services, and/or operating systems that are present on a network.

Abstract: A computer-implemented method can be performed to identify the publication of sensitive data and/or malware to a third-party site. According to the method, at least one processor retrieves data items stored on a computer system over a network, the computer system hosting a third-party site, to which the data items are published. The at least one processor stores the data items in local, computer-readable memory, and processes the data items stored in the local, computer-readable memory based on at least one search criteria. The at least one processor determines that at least one of the data items satisfies the at least one search criteria, and in response, provides an alert identifying the at least one data items.

Abstract: Embodiments of the invention are directed to systems, methods and computer program products for enhanced detection of polymorphic malicious content within an entity. In this regard, the present invention receives information associated with an incidence of an electronic file; receives an first hash value of the electronic file from a first network device and a second hash value of the electronic file from a second network device; compares the first hash value with the second hash value; determines that the electronic file is polymorphic based on at least the match; initiates an execution of a quantum optimization algorithm using a quantum optimizer to determine one or more hash value states associated with the electronic file for a third network device; and initiates a control signal configured to store the one or more hash value states in a database associated with the third network device.

Abstract: Systems, computer products, and methods are described herein for improvements for identifying if an interaction between a user and an entity have been misappropriated. A classical computer may be utilized to analyze data inputs related to a particular interaction and to determine if the interaction is potentially misappropriated based on a trigger activated by one or more of the inputs. If the classical computer identifies that the interaction is potentially misappropriated, then the inputs may be provided to a quantum optimizer to analyze the inputs in greater depth in order to provide a more in depth analysis of the interaction. Because the quantum optimizer is able to analyze more inputs than a classical computer it can provide a more accurate analysis of the interaction. For example, the quantum optimizer assigns qubits to the inputs and analyzes the inputs to determine if the potentially misappropriated interaction is likely misappropriated or not.

Abstract: The security of network connections on a computing device is protected by detecting and preventing compromise of the network connections, including man-in-the-middle (MITM) attacks. Active probing and other methods are used to detect the attacks. Responses to detection include one or more of displaying a warning to a user of the computing device, providing an option to disconnect the network connection, blocking the network connection, switching to a different network connection, applying a policy, and sending anomaly information to a security server.

Abstract: A method, computer program product, and system for generating a unique (deceptive) view of a network, the method includes a processor generating, for a host on a computing network, a virtual network topology view, where the virtual network topology view of the network host differs from a physical network topology of the computing network, wherein the network node perceives the computing network as comprising a network topology of the virtual network topology view. The generating includes: the processor modifying naming and addressing services of network components communicatively coupled to the network host and transforming network flows between the network resources viewable by the network host in the virtual network topology view, to be consistent with the virtual network topology view.

Abstract: An example apparatus configured to perform network deception may include processing circuitry configured to generate virtual instances of decoy resources residing within a defined host network for presentation to cyber attackers, control at least one software defined network switch to monitor network traffic directed to real and decoy resources of the defined host network, and route network traffic based on detected interactions with the decoy resources. The decoy resources may have differing levels of decoy fidelity, where decoy fidelity indicates a difficulty for a cyber attacker to determine that the resource is a decoy. Additionally, generating the virtual instances of decoy resources may be performed without modification to real assets or real services residing in the defined host network. Furthermore, decoy services may be made to appear on real network assets using software defined networking without modification to the real assets or real services residing in the defined host network.

Abstract: Method for deploying an authentication application in a secure element of a communication terminal comprising a non-secure processing unit executing a program for calling the authentication applications. The method comprises the step of transferring via at least one communication network data between a first trusted server associated with a provider of the security element so as to execute a first program for managing the security element, a second trusted server associated with at least one provider of authentication applications so as to execute a program for managing authentication applications, and the communication terminal, so as to create in the secure element a secure domain and install the authentication application therein.

Abstract: Methods, apparatus and systems for processing digital content service requests from user devices in a user network are disclosed. The method, performed by a control device, comprises receiving policy indications in respect of the user devices indicating desired control policies to be implemented in respect of the user devices, and associating user device source identifiers with the user devices indicating a network location to which responses should be directed, the user device source identifier associated with a particular user device depending on the policy indication for that user device. On receiving digital content service requests containing indications of domain names associated with content providers from which digital content is desired, the control device submits server location requests to a domain name system server comprising (i) the domain name from the digital content service request and (ii) the user device source identifier for the user device in question.

Abstract: The present application is directed a computer-implemented method for for managing traffic in a network. The method includes a step of receiving, from a user on the network, a request to access the internet. The method also includes a step of determining information of the user based upon the request. The information includes a security privilege of the user in the network. The method also includes a step of reviewing selection criteria of plural, dynamic, virtual private network (VPN) cloud servers in the network. The method also includes a step of matching the determined information of the user with the selection criteria. Further, the method includes a step of sending traffic of the user to one of the plural, dynamic VPN cloud servers based upon the matching step. The application is also directed to a system for securing web traffic on a network including a policy controller and router.

Abstract: In one embodiment, a response policy zone (RPZ) application generates an RPZ that includes contexts for the on-line threats that are associated with domain names. For a domain name that is associated with an on-line threat, the RPZ application determines a threat specification that describes a characteristic of the on-line threat. The RPZ application then generates an alias based on the domain name and the threat specification. Subsequently, the RPZ application generates a domain name system (DNS) resource record that maps the domain name to the alias, includes the resource record in the RPZ, and transmits the RPZ to a DNS name server that implements the RPZ. Upon receiving a DNS query associated with the domain name, the DNS name server generates a DNS response based on the alias. Because the domain name and the threat specification is reflected in the alias, the DNS response automatically provides a relevant context.

Abstract: A method includes receiving, at a control node of a cloud computing network, a first enterprise policy specific to the first enterprise and a second enterprise policy specific to the second enterprise, and managing communications between at least one user device of the first enterprise and the at least one enterprise application hosted on behalf of the first enterprise based on the first enterprise policy. The method also includes managing communications between at least one user device of the second enterprise and the at least one enterprise application hosted on behalf of the second enterprise based on the second enterprise policy.

Abstract: Preserving privacy related to networked media consumption activity. Source privacy zones are defined and associated with privacy standards Privacy standards include frequency criteria governing the storage of datasets including information associated with networked media consumption activity collected from the source privacy zone. Transaction requests including a networking protocol address are received over a network from a client device at a target location by a networked privacy system. The source privacy zone associated with the client device is identified. Using the networking protocol address to access characteristics having characteristic value(s), a dataset can be created including associating the networked media consumption activity with the characteristic and characteristic value(s). The dataset is pre-processed to comply with the privacy standards. The networking protocol address is discarded.

Abstract: A consent receipt management system may, for example, be configured to track data on behalf of an entity that collects and/or processes persona data related to: (1) who consented to the processing or collection of personal data; (2) when the consent was given (e.g., a date and time); (3) what information was provided to the consenter at the time of consent (e.g., a privacy policy, what personal data would be collected following the provision of the consent, for what purpose that personal data would be collected, etc.); (4) how consent was received (e.g., one or more copies of a data capture form, webform, etc. via which consent was provided by the consenter); (5) when consent was withdrawn (e.g., a date and time of consent withdrawal if the consenter withdraws consent); and/or (6) any other suitable data related to receipt or withdrawal of consent.

Abstract: Systems and methods may be provided to monitor media content on a monitored media device, including multimedia content, to determine whether the content is appropriate for the monitored device or devices, and to take action to remove, filter or otherwise block inappropriate content. The content monitored may include, for example, content such as audio content, video content, images, and text.

Abstract: A system for providing efficient delivery of media content to the masses is disclosed. In particular, the system may include receiving requests for content from a plurality of user devices. The system may then include synchronizing fulfillment timeframes for delivering the content based on a preset time interval. In response to the requests, the system may deliver the content, such as via a satellite network, to a storage device, such as, but not limited to, a digital video recorder, a video-ready-access device equipped with a satellite receiver and antenna, a digital subscriber line access multiplexer equipped with a satellite received and antenna, or any combination thereof, based on the preset time interval. The system may then include causing the storage device to deliver the requested content to the plurality of user devices via a wireless network communicatively linked to the plurality of user devices.

Abstract: A method and apparatus for providing a user input back channel (UIBC) in an audio/video (AV) source device and an AV sink device communicating according to a wireless fidelity (Wi-Fi) display (WFD) standard is provided. The method includes: setting up an AV control session and an AV data session between the AV source devices according to the WFD standards; enabling the UIBC from the AV sink device to the AV source device by using the AV control session; and transmitting a user input from the AV sink device to the AV source device through the UIBC.

Abstract: Methods and systems are provided for switching protocols at a local client without having to delete the existing client account and without having to create a new client account that specifies the new protocol. The client an application executing on the client is configured with the capability to dynamically switch between protocols. For example, the client or an application executing on the client may employ a remote procedure call (RPC) protocol and may dynamically switch to a hypertext transfer (HTTP) protocol or vice versa upon request of the server.

Abstract: Disclosed herein are systems, methods, and non-transitory computer-readable storage media for collecting call data, feeding call data to applications, and providing advanced call features.

Abstract: Methods and systems for pairing a device to an account managed by a remote service include connecting to a commissioning device. The commissioning device is a device that manages pairing of devices to a remote service. Pairing the device to the fabric in a remote service also includes receiving service configuration details from the commissioning device. The commissioning device has previously retrieved the service configuration details that contain details configured to enable the joining device to connect to the remote service. Using the service configuration details, a device connects to the remote service using the received service configuration details.

Abstract: A system, apparatus, and method for maintaining the consistency of global information is disclosed herein. In one embodiment, the method includes retrieving current version information associated with the global information from a global information server; retrieving global information from the global information server based on the current version information; updating a period of validity of the current version information based on a status of communication with the global information server; and suspending a network service for the global information when detecting that the period of validity of the current version information has expired.

Abstract: A method of a terminal for providing a video service in a communication system is provided. The method includes requesting a server to transmit first video data in a maximum available bandwidth, receiving, from the server, the first video data in the maximum available bandwidth, determining a first bandwidth for the first video data and a second bandwidth for second video data within the maximum available bandwidth so that the first video data and the second video data have differential image qualities when an event of requesting the second video data is detected, requesting the server to transmit the first video data in the first bandwidth and to transmit the second video data in the second bandwidth, and receiving the first video data in the first bandwidth and receiving the second video data in the second bandwidth from the server.

Abstract: Technologies for audiovisual communication include an audiovisual server and a number of audiovisual client devices, including a presenter device and a number of audience devices. Each audience device captures an audiovisual stream and transmits the audiovisual stream to the audiovisual server. Each audience device also captures sensor input data such as eye tracking data or facial expression data and transmits abstracted sensor input data to the audiovisual server. The abstracted sensor input data may be based on the captured audiovisual stream. The audiovisual server determines an interestingness rating associated with each audience device based on the sensor input data, and selects one or more audiovisual streams based on the interestingness ratings. The audiovisual server transmits the selected audiovisual streams to the presenter device. The audiovisual server may update the interestingness rating algorithm based on feedback from the presenter device or the audience devices.

Abstract: An organizer uses software to define a conference or meeting to take place at a physical meeting location, and to include a list of attendees. The attendees can receive the meeting information, including the location and attendee list, via client-side software on the wireless telephone. Also via their wireless telephones, the attendees can link to and display pages associated with other attendees, send and receive messages to and from one another, arrange further on-site or offsite meetings, and share various types of personal and business information.

Abstract: A method for transferring a teleconference between a mobile device and a conference center. The method includes identifying, by a mobile device, a candidate meeting center system for transfer of a teleconference conducted on the mobile device, and in response to identifying the candidate meeting center system, generating a user interface (UI) to provide one or more user selectable icons, the user selectable icons configured to facilitate transfer of the teleconference from the mobile device to the candidate meeting center system.

Abstract: An information processing apparatus that can be connected to information terminals and a data storage device through a network, and includes: a storage request receiver that receives conference identification information, information terminal identification information for a user participating in the conference, conference material data, and a storage request of the conference material data; an authentication program generator that generates an authentication program for determining whether the conference material data is capable of being transmitted to any of the information terminals when the conference material data is transmitted to the information terminal based on correspondence information in which pieces of the information terminal identification information are at least correlated with respective pieces of conference identification information, in accordance with the storage request; and a storage controller that stores the conference material data contained in the storage request and the authenticat

Abstract: A method of remotely controlling an electronic device is disclosed. In some implementations, the method is performed on a server system. The server system receives, from a first electronic device, a first media control request, wherein the first electronic device provides a single user interface that allows a user to both select media content for presentation by the first electronic device and to generate media control requests for transmission to the server system; and the first electronic device also sends a second media control request to a second electronic device over a local area network to which both the first electronic device and the second electronic device are connected. The server system then sends the received first media control request to the second electronic device, distinct from the first electronic device, wherein the server system and the second electronic device are not on the same local area network.

Abstract: Mechanisms are provided for presenting a media location browsing interface to facilitate a media search and/or seek. A client device receives a media stream from a streaming server. This client device provides a media location browsing interface after receiving the media stream. This media location browsing interface includes a plurality of key frames representing locations along the media stream that are selectable at the client device. A seek request to play the media stream from a seek location corresponding to one of the plurality of key frames is captured. The client device begins playback of the media stream at the seek location.

Abstract: The present invention discloses a method and an apparatus for media stream transmission, and user equipment. According to the method and the apparatus for media stream transmission, and the user equipment in embodiments of the present invention, same media content, of multiple users, on unicast bearers is multicast by using an MBMS channel, so that a backhaul network resource and an air interface resource that is of a base station can be saved, thereby reducing costs for transmitting a media stream.

Abstract: A streaming source sends streaming content to a display device. A camera captures images of the display device playing the streaming content and/or a user's interaction with the display device along with the displayed response to the user's interaction. The captured content is analyzed to determine, for example, image quality characteristics of the displayed content, a user experience associated with the displayed content or whether the displayed content matches an expected outcome associated with testing input. Information determined from the analysis of the captured content may be used to adjust characteristics of the streaming content, such as streaming parameters at the streaming source or configuration of the display device. A testing system may analyze the captured content to evaluate performance of the streaming system. Results of the testing may be sent to a data store and/or used to mitigate a poor user experience such as poor image quality.

Abstract: Mechanisms are provided to manage media stream transmissions at a content server. A content server detects that a user on a device such as a mobile device has stopped playing a live media stream. The content server maintains information associating the user with the media stream and time information. When the content server detects that a user wishes to resume playing a media stream, the user can continue viewing the media stream from where stoppage occurred. In many instances, the content server stores many hours of live media stream data and allows a user to select a particular starting point.

Abstract: A software-defined media platform having one or more media processing units that may be dynamically instantiated, interconnected and configured according to changes in demand, resource availability, and other parameters affecting system performance relative to demand. In one example media processing method, a source media stream may be received via multicast or unicast. The source media stream may be processed into one or more levels of work product segments having different media characteristics by a plurality of transcoding processing units, as needed. One or more levels of work product segments, or the source media stream, may be packaged (e.g., including resegmenting) into final work product segments having select media characteristics, which may be uploaded to a cloud storage unit for delivery to end users.

Abstract: Disclosed is a content delivery system of networked computer systems, the content delivery system for effecting transmission of media assets to a user device having an output interface available to a user, the media asset being transmitted as a media stream for outputting to the user while the media stream is still being received at the user device. The content delivery system comprises a first computer system operated by a first operator and a second computer system operated by a second operator. Each of the first and second computer systems is configured to execute a respective instance of contract software for effecting the transmission of the media asset to the user device as the media stream. The contract software embodies a contract between the first operator and the second operator defining permitted interactions of their computer systems.

Abstract: Techniques are described for adjusting parameter settings for bitrate selection algorithms for devices streaming media content. Control parameter settings are selected for playback of first media content. Test parameter settings are selected for playback of second media content. If the test parameter settings result in better playback performance relative to the control parameter settings, the test parameter settings become the new control parameter settings.

Abstract: Methods and systems for a content server to select sets of video streams having different encoding parameters for transmitting the sets of video streams to a media device are disclosed herein. In some embodiments, a method for transmitting video streams for a media program from a server to a media device includes: selecting, by the server, first encoding parameters including a first bitrate for a first set of video streams for the media program based on a first estimated bandwidth capacity for a network linking the server and the media device, transmitting the first set of video streams from the server to the media device, determining, by the server, second encoding parameters including a second bitrate for a second set of video streams for the media program, and transmitting the second set of video streams from the server to the media device.

Abstract: A technique for detecting an encoder functionality issue in a media distribution system is presented. In the media distribution system consecutive media segments generated by an encoder are transmitted to a media client, and media descriptions describe expected availability times of media segments for the media client. A method implementation of the technique comprises the step of monitoring an availability time of a media segment compared to an expected availability time of the media segment, wherein the expected availability time is described by, or derived from, a media description. The method further comprises determining whether a deviation of the monitored availability time of the media segment from the expected availability time of the media segment is present, and detecting the encoder functionality issue based on a result of the determination. The encoder functionality issue may comprise one or more of an encoder restart, an encoder malfunction and an encoder time drift.

Abstract: An online system more efficiently streams multimedia content over the Internet for play back on client devices with varying computing power and network bandwidths by generating enhanced manifest files that more efficiently identify suitable media representations of the multimedia content. Each media representation has multiple media segments according to predefined byte ranges and a manifest file, which identifies location of the media file, bitrates, resolution, byte range, total duration, and other metadata. The online system customizes a manifest file for a user based on various factors including device capacity, network connectivity type and geolocation of the user. The online system also generates manifest fetch commands, which more efficiently fetch media segments for streaming. In response to changes of streaming server and media file (e.g., increased popularity), the online system dynamically updates corresponding manifest files.

Abstract: Described are examples for obtaining data from a single stream output. An indication of requested data from multiple stream sources can be received from an application. A single stream output including one or more output frames can be received from a stream server where at least one output frame includes at least data from each of the multiple stream sources. The requested data can be extracted from the single stream output and provided to the application.

Abstract: A method for estimating a loss of information in a video stream comprising video frames of different frame types, wherein the video stream is transmitted in a sequence of data packets, the method comprising during a first learning period of the video stream: identifying the different frame types in the video stream, determining a reference average size of at least some of the frame types in the video stream, determining a reference occurrence frequency how often at least some of the frame types occur in the video stream, wherein the reference average size and the reference occurrence frequency are determined using information provided in a header of the transmitted data packets, during a second time period of the stream: identifying the different frame types in the video stream taking into account the reference average frame size, the reference occurrence frequency determined in the first learning period, and information provided in the header of the data packets in the second time period, determining t

Abstract: Systems and methods are provided for enhancing streaming performance through controlled and selectively-applied reductions in the color depth of streamed video content. In various embodiments, the method includes receiving, at a streaming media server, a request transmitted over a communications network to stream video content to a client media receiver. In response to this request, a streaming video session is initiated between the client media receiver and the streaming media server. During the streaming video session, the streaming media server obtains the video content as video input data having an original color depth; generates an encoded video stream from the video input data, while selectively reducing a color depth of the encoded video stream; and transmits the encoded video stream over the communications network to the client media receiver. The streaming media server repeats the steps of generating and transmitting until termination of the streaming video session.

Abstract: A system and method enable the modification of software data queries for the purpose of overcoming the problem of large, cumbersome data queries. The method and system presented includes a client device, which may split a software data query into segments representing a fraction of the original query size, and submit the divided data query to a remote server. The division of the initial query may continue until the query size is usable by the remote server. The remote server may receive the segmented query, and transmit database records associated with the fields in the divided query to the client device. Further segments of the divided query may be transmitted until the full query has been transmitted to the remote server. The divided queries may include date time stamp bounds to determine the desired database records. A computing device created specifically for the above-listed tasks may be utilized.

Abstract: An information processing apparatus includes a processing unit that performs a process, a controller that performs a control operation to cause the processing unit to perform the process requested by a hypertext transfer protocol (HTTP) request from a display apparatus that displays process results of the process, and a notification unit that notifies the display apparatus of the process results through communication different from an HTTP response responsive to the HTTP request having requested the process to be performed.

Abstract: Provided is a communication method of an electronic device, including executing a web browser, requesting registration in an IP multimedia core network subsystem (IMS) using a first client associated with the web browser, and displaying, in a part of the web browser using the first client, information associated with a network to which the electronic device is connected.

Abstract: A method includes receiving, at a computing device from a social media platform, a first post associated with a first social media account. The method also includes determining, by the computing device, an event category of an event described in the first post. The method further includes determining, by the computing device, an estimated location associated with the event. The method also includes determining, by the computing device, a distance threshold based on the event category. The method further includes determining, by the computing device, whether a location of concern is within the distance threshold of the estimated location. The method also includes generating, by the computing device, an alert based on a determination that the location of concern is within the distance threshold of the estimated location.

Abstract: In one embodiment, a method includes receiving, at an interface of a client system of a user of an online social network, a user input selecting a deep link. The deep link may include instructions for accessing a media-content item via a media-player device. The deep link may be selected by the user from a notification from the online social network referencing the media-content item. The media-player device may be proximate to the client system. In response to the selection of the deep link, instructions for accessing the selected media-content item via the media-player device may be sent from the client system to the media-player device.

Abstract: While a support apparatus is remotely operating an information processing apparatus via a relay server, remote operation of the information processing apparatus by another apparatus other than the support apparatus is restricted.

Abstract: A method of facilitating an operating terminal to control media information displayed on target terminals using a computer server is disclosed. Upon receipt of a search request for target terminals within a local area network from an operating terminal, the computer server identifies a list of online terminals as the target terminals and returns the target terminals to the operating terminal. A user of the operating terminal then generates an operation instruction for controlling media information displayed on the target terminals. In response to the operation instruction, the computer server sends the operation instruction to respective applications running on the target terminals. The respective applications are configured to control the media information displayed on the target terminals in accordance with the operation instruction.

Abstract: Systems, apparatuses, methods, and computer-readable media, are provided for offloading computationally intensive tasks from one computer device to another computer device taking into account, inter alia, energy consumption and latency budgets for both computation and communication. Embodiments may also exploit multiple radio access technologies (RATs) in order to find opportunities to offload computational tasks by taking into account, for example, network/RAT functionalities, processing, offloading coding/encoding mechanisms, and/or differentiating traffic between different RATs. Other embodiments may be described and/or claimed.

Abstract: Content is provided from a source device to a target device using a trusted domain. A customer calls customer service of a service provider to provide information for registering a target device. The service provider enters the information in a billing system. The billing system provides the data to a profile management server. The service provider instructs the customer to install an application on the target device and the content source device. The profile of the target device is provided to the content source device. The customer connects with the content source device to establish a trusted network. Then, after receiving a request for content from the target device, the content source device decrypts the requested content to remove existing encryption, transcodes the requested content according to the profile of the target device and streams the content to the target device.