Abstract: An automated creation of a phishing document uses personal data of a person stored in a database of persons and anonymous and categorisable personal properties stored in a hierarchical properties database. A relevance value is assigned to each personal property. At least one property of the person contained in the personal data has a correspondence in the properties database, that is a correspondence property. It is verified whether one of the correspondence properties is hierarchically subordinate to a phishing-document-specific default personal property. This subordinate correspondence property forms a creation property. The phishing document is created based on the creation property if this requirement is met. It is verified whether the relevance value of the creation property corresponds to a predefined target relevance value. The creation property is selected as a preparation property and used to prepare the phishing document if the assigned relevance value corresponds to the target relevance value.

Abstract: Credential phishing attack mitigation is disclosed. A URL that is associated with a suspected credential phishing web page is received. The suspected credential phishing web page is one that includes at least one element soliciting at least one credential. The URL is included in a message having at least one intended recipient. An artificial credential is provided to the suspected credential phishing web page. An indication is received that, subsequent to providing the artificial credential to the suspected credential phishing web page, an attempted use of the artificial credential to access a resource was made. In response to receiving the indication that the attempted use of the artificial credential to access the resource has been made, at least one remedial action is taken with respect to the suspected credential phishing web page.

Abstract: An authentication system includes an authentication module and a user history database storing order information that includes, for each of multiple logins of the first user to a web property, at least one of: an indication of an order of hypertext transfer protocol (HTTP) headers that were previously received at the authentication module during the login, and an indication of an order of navigator object properties that were previously returned to the authentication module during the login. The authentication module is configured to: receive, from a web browser of a first entity attempting to log in to the web property, credentials of the first user; determine order information of the first entity's web browser; perform a comparison operation based on the order information of the first user and that of the first entity, and determine whether to allow the first entity to log in based on the comparison operation.

Abstract: In an example embodiment, rather than merely identifying and patching vulnerabilities, a defender in a computer system is able to utilize deception to set traps for attackers who might attack an application. In this manner, rather than the attacker simply merely needing one entry point to succeed, the attacker would then need to avoid all traps, and the defender only needs one trap to be alerted of the attacker. More particularly, in an example embodiment, traps are set in a way that fools attackers, by blending deceptive but believable network traffic into real traffic to and from the application.

Abstract: The present document describes a communication session resumption mechanism. A client computer system establishes a communication session to a server computer that is a member of a set of related server computers. As a result of establishing the communication session, the server computer identifies the set of related server computers to the client computer system. The set of related server computers share communication session information with each other, allowing the client computer system to resume the communication session with another server computer belonging to the set of related server computers. The communication session may be specified to the other server computer by the client computer system by providing a session identifier or a session ticket.

Abstract: Based on analyzing a serverless function associated with a first role, a set of security permissions granted to the serverless function is identified based on the first role and a first attribute of the serverless function. A least privilege role indicating a set of least privilege security permissions for the serverless function is generated based, at least in part, on the first attribute. Based on comparing the least privilege role with the first role, it is determined if the set of security permissions granted to the serverless function is more permissive than the set of least privilege security permissions. Based on determining that the set of security permissions granted to the serverless function is more permissive than the set of least privilege security permissions, the first role is reported as over-permissive.

Abstract: A method, system, and computer program product for recommending an initial database security model. The method may include identifying a plurality of nodes connected to a security network. The method may also include analyzing security characteristics of each node of the plurality of nodes. The method may also include identifying, from the security characteristics, key factors for each node. The method may also include calculating similarities between each node of the plurality of nodes. The method may also include building a self-organized centerless network across the plurality of nodes by grouping nodes with high similarities based on the similarities between each node, where the self-organized centerless network is a centerless network without a central management server, and includes groups of nodes from the plurality of nodes. The method may also include generating federated security models for the groups of nodes.

Abstract: Some embodiments of the invention provide a method of modifying and validating API requests received at an API server. At a mutating admission controller of the API server, the method intercepts an API request received at the API server. The method invokes a mutating webhook to query a policy agent that includes a set of policies for modifying API requests to determine whether the API request requires modifications. When the policy agent determines that the API request requires modifications based on an identified policy from the set of policies, the method performs the modifications and forwards the modified API request for validation by the API server. After the API server has validated the API request, the method intercepts the API request at a validating admission controller and invokes a validating webhook to query the policy agent to determine whether the API request is valid.

Abstract: A system and method for automatically assessing and improving a cybersecurity risk score, wherein a cybersecurity risk score and cyber-physical graph for a network are retrieved and analyzed to identify potential improvements that can be made to network topography and device configurations, changes are applied automatically and an updated cyber-physical graph reflecting the applied changes is produced, and the updated cyber-physical graph is reassessed to determine the effect of the changes that were applied.

Abstract: In one aspect, a computerized system includes an access manager server connected to one or more target computer systems. The access manager server is connected to the one or more target computer systems via an Endpoint Detection and Response (EDR) system. The EDR system continually monitors one or more target computer systems (e.g. endpoints) and responds to mitigate a cyber threat to the one or more target computer systems. The EDR system includes an EDR control plane that manages and communicates with one or more EDR agents. The EDR control plane causes a specific computer security action in the one or more target computer systems via one or more EDR agents. One or more EDR agents are installed in the one or more target computer systems. The one or more EDR agents are made available via the EDR API.

Abstract: The present application generally relates to methods, systems, and programming for detecting security issues within a computing environment. In some embodiments, data flows may be analyzed to determine links between data sources and metadata. Using the derived relationships, a determination may be made as to whether the is a security issue, such as a security policy ambiguity, or a potential security issue. If so, one or more actions may be taken to prevent or minimize an impact of the security issue.

Abstract: Disclosed herein are techniques for protecting web applications from untrusted endpoints using remote browser isolation. In an example scenario, a browser isolation system receives a request from a client browser executing on a client device to connect with a remote application accessible via a private network. A surrogate browser is provided to facilitate communications between the client browser and the remote application. A security policy is enforced against the communications.

Abstract: Techniques are described for managing communications between multiple intercommunicating computing nodes, such as multiple virtual machine nodes hosted on one or more physical computing machines or systems. In some situations, users may specify groups of computing nodes and optionally associated access policies for use in the managing of the communications for those groups, such as by specifying which source nodes are allowed to transmit data to particular destinations nodes. In addition, determinations of whether initiated data transmissions from source nodes to destination nodes are authorized may be dynamically negotiated for and recorded for later use in automatically authorizing future such data transmissions without negotiation. This abstract is provided to comply with rules requiring an abstract, and it is submitted with the intention that it will not be used to interpret or limit the scope or meaning of the claims.

Abstract: A method for processing a security policy of a device may include a step for receiving, from another device, a first message including first information about a security policy of the other device. The first message may include a direct communication request message or a link modification request message. The method may further include the steps of: determining whether to accept or reject the first message on the basis of both the first information about the security policy of the other device and second information about the security policy of the device; and sending a second message on the basis of the determination.

Abstract: A method of verifying resource protection statuses for resources for address-based resources may include receiving a request for verification of resource protection from a client device for an address-based resource. The request includes an address of a resource. The intermediate system is programmed to receive resource protection verification requests from a plurality of client devices, and to receive resource protection verifications from a plurality of resource protection systems that are in communication with the intermediate system. The method also includes determining that none of the resource protection systems in the plurality of resource protection systems currently protect the resource; retrieving information that is securely stored for the resource and a user associated with the request; and sending the information to one or more of the plurality of resource protection systems as a request to protect the resource.

Abstract: A network device may receive a request to install a rule set, and may add, based on the request, information identifying the rule set to a list of rule sets associated with the network device. The network device may receive a packet destined for an endpoint device, may generate a copy of the packet, and may cause the packet to be forwarded to the endpoint device. The network device may perform deep packet inspection of the copy of the packet to identify a packet rule set associated with the copy of the packet, and may determine whether the packet rule set, associated with the copy of the packet, corresponds to the rule set. The network device may cause the copy of the packet to be forwarded to a content destination device when the packet rule set, associated with the copy of the packet, corresponds to the rule set.

Abstract: Device(s) and computer program products for creating custom music/video messages to facilitate and/or improve social interaction. The created music/video messages include at least portions of: music, video, pictures, slideshows, and/or text. The music/video messages enable feelings or emotions to be communicated by the user of the device to one or more recipient device(s).

Abstract: A voice track (VT) device obtains a talent-to-master schedule and a station-to-master schedule. A master broadcast log, which includes an empty master VT associated with a user, is identified based on the talent-to-master schedule. The master broadcast log is displayed in a GUI on the VT recording device. User input selecting the empty master VT is received. Subscribing stations that use the identified master broadcast log as a basis for generating station broadcast logs are identified based on the station-to-master schedule, and obtained from the stations. For each station broadcast log that includes a station VT corresponding to the empty master VT, a match status is determined. The match status indicates whether media items scheduled for broadcast in slots adjacent to the station VT differ from media items scheduled for broadcast in slots adjacent to the empty master VT. Match statuses of station VTs corresponding to the empty master VT are displayed on a child window of the GUI.

Abstract: A method of coordinating real-time experiences of a realm among members of a group of users, the group of users including an administrative user and at least one participating user, is provided. The method includes transmitting by a server from a computing device of the administrative user, to a computing device of a first participating user of the group, in a real time session that allows the first participating user to experience the realm in real time, (a) data characterizing a series of locations in the realm, the series of locations comprising a first location and a second location, wherein the first location is associated with a first panoramic image and the second location is associated with a second panoramic image, and (b) executable code.

Abstract: Systems and methods are configured to receive an indication that a moment, such as an anchor, is to be positioned at a first location on a webpage, via code embedded in the webpage. A content specification associated with the anchor is received. An interaction rule associated with the anchor is received that specifies that content specified by the content specification is to be displayed at least partly in response to a specified user interaction with the webpage. Code is automatically generated configured to cause the anchor to be located at the first location when accessed by a user browser, wherein, at least partly in response to a user browser accessing the first webpage, and the first user interacting with the webpage in a manner that satisfies the interaction rule, the content specified by the content specification is rendered.

Abstract: A media file system, apparatus, computer program product and method are provided for of streaming media file data. An exemplary method includes receiving a request for media file data for a desired time, and determining from the desired time an available segment of media file data, wherein the segment includes media file data from a start time to an end time. The method further including returning the available segment of media file, wherein the step of returning the available segment of media file data includes returning information indicative of the start time to end time covered by the media file data of the available segment.

Abstract: A method for use in a processing system includes receiving information regarding a work, where the information does not include a valid unified numbering system identifier that identifies a particular work of a plurality of works, and where the information includes one or more received attributes associated with the work. The method further includes obtaining a plurality of sets of attributes from one or more databases, which include a set of attributes associated with each work of the plurality of works. The method further includes determining whether a threshold number for a set of attributes of the plurality of sets of attributes matches corresponding ones of the one or more received attributes. When the threshold number does not match, the method further includes assigning a new unified numbering system identifier associated with the work and storing the new unified numbering system identifier in a database of the processing system.

Abstract: A system for device discovery for social playback is disclosed. The system operates to connect a host media playback device to a media output device and broadcast a social playback session to guest media playback devices. Upon joining a social playback session, a guest media playback device may control the media playback at the host media playback device. Where the media output for the social playback session is provided by the media output device.

Abstract: In various embodiments, a caching application streams segments of a downloadable to a client device. At a first point-in-time, the caching application receives a first request for a first segment of the downloadable from the client device. The caching application computes a cache key based on a request Uniform Resource Locator included in the first request and a version identifier associated with the downloadable. The caching application determines that no segment corresponding to the cache key is stored in a cache. The caching application transmits a second request for the first segment to a different server. Upon receiving a first version of the first segment from the different server, the caching server transmits a response that includes the first version of the first segment to the client device.

Abstract: Described is a method of managing a network for delivering content in a hybrid unicast/multicast network, where content is requested by clients over unicast, but all or some of the content is delivered in part over multicast. Typically, a client requests content (in the form of segments) via a first proxy. The segments are delivered to the first proxy over multicast from a second proxy, before onward transmission to the requesting client over unicast. The segments are also cached at the first proxy, and can be transmitted over unicast to other clients requesting those segments. However, problems can arise if cached segments are transmitted to clients too quickly. In one solution, the first proxy measures the multicast rate of delivery of segments from the second proxy over multicast, and limits the transmission rate of those segments over unicast to requesting clients to no greater than the measured multicast delivery rate.

Abstract: An end user premises device is provided that includes a memory, one or more transceivers, and one or more processors. The one or more transceivers are configured to communicate with one or more stations in a network and a client device. The one or more processors are configured to receive a first user request for data from the client device using the one or more transceivers, determine a first point in time for retrieving the data based on an amount of charge in batteries of the one or more stations in the network, retrieve, at the first point in time, the data from a remote server via the network using the one or more transceivers, store the data in the memory, and in response to a second user request, transmit the data to the client device using the one or more transceivers.

Abstract: A system and a method for media streaming from multiple sources are disclosed. A content requesting client device accesses a server to receive a list of available sources that may include multiple Content Delivery Networks (CDNs) and independent servers. Based on a pre-set criteria, such as the source delivery performance and cost, the client device partitions the content into parts, allocates a source to each part, and simultaneously receives media streams of the content parts from the allocated sources. The server may be a Video-on-Demand (VOD) server, and the content may be a single file of a video data, such as a movie. The delivery performance of the used sources is measured during the streaming for updating the partition or the allocation. The updated measured performance may be stored locally at the client device, or at a server for use by other clients. The client actions may be implemented as a client-side script.

Abstract: Methods, systems, and devices for wireless communications are described. In a wireless audio system, a first wireless device may generate a first media stream associated with a first media mode and a second media stream associated with a second media mode, buffer the first media stream in accordance with a first latency time value for adjusting a first latency time of the first media stream and buffering the second audio stream, independently from the first media stream, in accordance with a second latency time value for adjusting a second latency time of the second media stream, and transmit a mixed media stream including the buffered first media stream mixed with the buffered second media stream to a second wireless device.

Abstract: Disclosed are systems and methods to deliver media files at a highest perceived presented quality. Rather than measure quality as a difference between an encoded version of the media file and the original version of the media file, in accordance with the disclosed implementations, quality is based on a presented quality of each fragment of a media file when presented by a device to a user. The disclosed implementations determine a presented quality score for each fragment of a media file, the presented quality score indicative of a predicted quality of the fragment as perceived by a user when the fragment is presented. The presented quality score may be determined based on one or more of a bitrate used to encode the media segment, a device type of a device used to present the media segment, the content of the segment itself, etc.

Abstract: A system for providing quality of experience (QoE) metrics to incoming application data transferred to a vehicle includes a cloud-based dynamically updatable application QoE policy engine adapted to establish QoE metrics and prioritization criteria for incoming application data and to assign QoE policies to the vehicle, and a data controller within the vehicle adapted to receive QoE policies from the application QoE policy engine and enforce the QoE policies assigned, wherein the data controller is adapted to enforce the QoE policies assigned with an enhanced distributed control access (EDCA) algorithm adapted to prioritize incoming application data traffic received via IEEE 802.11 standard supported wireless LAN technology channels and with a resource block allocation and network slicing (RAN) algorithm adapted to prioritize incoming application data traffic received via cellular channels.

Abstract: A system designed for increasing network communication speed for users, while lowering network congestion for content owners and ISPs. The system employs network elements including an acceleration server, clients, agents, and peers, where communication requests generated by applications are intercepted by the client on the same machine. The IP address of the server in the communication request is transmitted to the acceleration server, which provides a list of agents to use for this IP address. The communication request is sent to the agents. One or more of the agents respond with a list of peers that have previously seen some or all of the content which is the response to this request (after checking whether this data is still valid).

Abstract: A system designed for increasing network communication speed for users, while lowering network congestion for content owners and ISPs. The system employs network elements including an acceleration server, clients, agents, and peers, where communication requests generated by applications are intercepted by the client on the same machine. The IP address of the server in the communication request is transmitted to the acceleration server, which provides a list of agents to use for this IP address. The communication request is sent to the agents. One or more of the agents respond with a list of peers that have previously seen some or all of the content which is the response to this request (after checking whether this data is still valid).

Abstract: A system designed for increasing network communication speed for users, while lowering network congestion for content owners and ISPs. The system employs network elements including an acceleration server, clients, agents, and peers, where communication requests generated by applications are intercepted by the client on the same machine. The IP address of the server in the communication request is transmitted to the acceleration server, which provides a list of agents to use for this IP address. The communication request is sent to the agents. One or more of the agents respond with a list of peers that have previously seen some or all of the content which is the response to this request (after checking whether this data is still valid).

Abstract: A system designed for increasing network communication speed for users, while lowering network congestion for content owners and ISPs. The system employs network elements including an acceleration server, clients, agents, and peers, where communication requests generated by applications are intercepted by the client on the same machine. The IP address of the server in the communication request is transmitted to the acceleration server, which provides a list of agents to use for this IP address. The communication request is sent to the agents. One or more of the agents respond with a list of peers that have previously seen some or all of the content which is the response to this request (after checking whether this data is still valid).

Abstract: A method for automated web resource deployment is provided. The method comprises creating web resource publication requests, wherein each web resource publication request comprises a number of configuration changes necessary to publish a web resource, on a network, at a particular uniform resource location. A standard format, validation workflow, and an approval workflow are provided for automation of the web resource publication requests. Once validated and approved, web resource publication requests are automatically converted to API calls which are executed on backend servers to implement the configuration changes required in the environment without further human intervention.

Abstract: Methods and apparatus for client-directed placement of remotely configured service instances are described. One or more placement target options are selected for a client of a network-accessible service based on criteria such as service characteristics of the placement targets. The selected options, including a particular placement target that includes instance hosts configurable from remote control servers, are indicated programmatically to the client. A determination is made that a service instance is to be configured at the particular placement target on behalf of the client. A remote control server is configured to issue administrative commands to an instance host at the particular placement target to configure the service instance.

Abstract: In a computer-implemented method for configuring a distributed computer system comprising a plurality of nodes of a plurality of node classes, configuration files for a plurality of nodes of each of the plurality of node classes are stored in a central repository. The configuration files include information representing a desired system state of the distributed computer system, and the distributed computer system operates to keep an actual system state of the distributed computer system consistent with the desired system state. The plurality of node classes includes forwarder nodes for receiving data from an input source, indexer nodes for indexing the data, and search head nodes for searching the data. Responsive to receiving changes to the configuration files, the changes are propagated to nodes of the plurality of nodes impacted by the changes based on a node class of the nodes impacted by the changes.

Abstract: Systems, methods, and computer-readable storage media that may be used to provide an adaptive user interface with a reduced data transmission payload are provided. One method includes identifying a plurality of data files available for transmission to a client device, each of the plurality of data files transmitted as a set of data packets having a payload comprising an amount of data, each of the plurality of data files having different payloads and causing the client device to display a respective user interface component within a user interface on the client device. The method further includes determining a property of the client device and/or a user associated with the client device and selecting a data file from among the plurality of data files in response to the property. The method further includes causing the selected data file to be transmitted to the client device.

Abstract: A method to assist with processing distributed jobs by retrieving and/or synchronizing supplemental job data. The method includes: transmitting, by a first component of a first execution environment via a first connection to a second component of a second execution environment, a first request associated with a job; receiving, by the first component via a second connection from the second component, a second request associated with the job; transmitting, by the first component via the second connection to the second component, a response to the second request, the response comprising an information associated with the job; and receiving, by the first component via the first connection from the second component, a result of the job.

Abstract: An example method includes obtaining first audio data representing one or more initial utterances during an interactive voice session with an interactive voice system (IVS); generating, based on the first audio data, a prediction regarding whether a subsequent utterance of the user in the interactive voice session will contain sensitive information; obtaining second audio data representing the subsequent utterance; determining, based on the prediction, whether to transmit the second audio data to the IVS via a first communication channel; based on a determination not to transmit the second audio data to the IVS via the first communication channel: transmitting third audio data to the IVS via the first communication channel in place of the second audio data; and transmitting the second audio data to a server via a second communication channel that bypasses the IVS.

Abstract: Example techniques relate to cloud queue tombstones. An example implementation may involve a computing system receiving instructions to remove a particular media item from a playback queue. Based on the instructions, the computing system removes the particular media item from the playback queue and adds, to the playback queue, a tombstone indicator indicating that the particular media item has been removed from the playback queue. The computing system receives, from the media playback system, a request for a window of one or more media items from the playback queue. Based on the request, the computing system sends, to the media playback system, data representing a particular window of media items from the playback queue, wherein the particular window includes the tombstone indicator. The computing system detects a given tombstone removal trigger from among multiple tombstone removal triggers and based on the detecting, removes the tombstone indicator from the playback queue.

Abstract: A machine learning engine identifies training data that includes historical user data and historical content data. A machine learning classifier is trained on the training data to generate a relevancy value for each of a plurality of given content items associated with a given user. The relevancy value for each given content item is indicative of a likelihood that the given user will perform a first user device input action and of a likelihood that the given user will perform a second user device input action, in response to being presented with the given content item. The machine learning classifier receives a plurality of candidate content items associated with a first user. The machine learning classifier generates a relevancy value for each candidate content item. At least one of the candidate content items is identified for inclusion in a first content collection based on the generated relevancy values.

Abstract: Embodiments provide systems and methods to load balance using tenant affinities. A method includes configuring a load balancer with a set of tenant affinities, the set of tenant affinities including a tenant affinity for each of a plurality of tenants with respect to each of a plurality of computing nodes that provide services to users in a multitenant environment. Load balancing may include receiving a user request, associated with a tenant, for a service provided by the computing nodes, determining a highest tenant affinity computing node for the tenant using the set of tenant affinities and directing the user request to the highest tenant affinity computing node for the tenant.

Abstract: Systems and methods of providing virtual storage spaces (“VSS”) are presented. A VSS is a virtual representation of a storage space in a database or other data structure with which user(s) who have access to are allowed to interact—in real-time or not—via a VSS Client U1. A VSS Client U1 is a cloud-based U1 with the following components: (a) Cloud Communicator (CC) U1, which allows user(s) to communicate through any communication application; (b) VSS U1, which allows exchange and/or execution of virtual files and virtual applications, and (c) User Cloud Storage (UCS) U1, which allows user(s) to share, copy, delete, export and import any virtual file (in a storage space such as cloud storage, dedicated or shared storage server, remote storage hardware, etc.) and/or virtual application in the cloud, dedicated or shared server, etc. Disclosed herein are various interactive online experiences between users in various engagement scenarios (e.g.

Abstract: The application is directed to techniques, devices, and systems for updating files. For example, a remote system may store first data representing a first version of a file and second data representing a second version of the file. The remote system may then determine that a first portion of the first data corresponds to a first portion of the second data. Based at least in part on the determination, the remote system may identify a second portion of the first data using the first portion of the first data and identify a second portion of the second data using the first portion of the second data. The remote system may then generate third data representing a difference between the second portion of the second data and the second portion of the first data. Additionally, the remote system may store the third data in association with the file.

Abstract: An illustrative storage management appliance is interposed between client computing devices and one or more cloud storage resources. The appliance uses cloud storage resources in conjunction with a network attached storage device configured within the appliance to provide to the client computing devices seemingly unlimited network attached storage on respective network shares. The storage management appliance monitors data objects on the network shares and when a data object meets one or more criteria for archiving, the storage management appliance archives the data object to a cloud storage resource and replaces it with a stub and preview image on the network share. When access to the stub and/or preview image is detected, the storage management appliance restores the data object from the cloud storage resource. The criteria for archiving flexibly allow individual data objects to be archived to cloud storage without archiving frequently-accessed “neighboring” data objects on the same network share.

Abstract: A method transmits temporally successive datasets of a position sensor via an Ethernet network, wherein a respective dataset of the position sensor consists of a maximum of 4 bits. The method includes the steps of: continuous reading, by a reference component connected to the Ethernet network, of the datasets of the position sensor which are to be transmitted; and continuous writing, by the reference component, of a respective dataset to a 4-bit transmit register of a Media Independent Interface of the reference component.

Abstract: Embodiments are directed to communicating with and controlling operation of electronically-controlled appliances. In one scenario, a computer system receives a first input from a computing system indicating that an electronically-controlled appliance is permitted to communicate with a cloud computing platform. The computer system generates a notification that is to be sent to a software application, where the software application is configured to control functions of the electronically-controlled appliance. The computer system transmits the generated notification to the software application, where the generated notification indicates that the cloud computing platform is communicably connected to the electronically-controlled appliance.

Abstract: A mobile computing device enabled by a customizable data cognition layer (DCL) software program to convert input information from a variety of sensors into real-time contextual messages is disclosed. The DCL software incorporates customizable software components known as plug-ins to expand the use of the mobile computing device.

Abstract: Information sharing is initiated between devices based on identification, by one or more of the devices, of a context in which the information is to be shared. Services to provide the shared information are identified based on a mutually agreed level of sensitivity for the information sharing. Information is shared between the devices via the services. Use of the services to share information is stopped in response to a change in context identified by one or more of the devices.