Abstract: Systems and methods are provided for sharing authentication information. The systems and methods include retrieving, with a messaging application, a list of applications that are installed on a user device; searching the list of applications to identify a given application within the list of applications that is configured to share authentication information with the messaging application; and in response to identifying the given application within the list of applications, generating for display within a graphical user interface of the messaging application an option to authorize the messaging application to share authentication information with the given application.

Abstract: A network security system includes a barrier surrounding an enclosure. The enclosure contains a first network and a first networked device connected to the first network. The barrier prevents the first network from breaching the enclosure and permits a second network to penetrate a first portion of the barrier. A container located within the enclosure mounts to the first portion of the barrier, such that a second portion of the container superposes the first portion of the barrier. The container permits the first network and the second network to enter the container. The container prevents the second network from breaching the container and entering a third portion of the enclosure located outside the container. A firewall device located within the container controls network traffic between the first networked device and a second networked device connected to the second network.

Abstract: One or more storage devices store resource migration schedule information including a plurality of records. Each of the plurality of records indicating a migration source node and a migration destination node of each of one or more resources. One or more processors are configured to determine a priority of each of the plurality of records such that a record having locality after migration has a higher priority than a priority of a record without locality after migration. The locality is determined based on whether a virtual machine and a volume associated with each other in advance exist in the same node. The one or more processors are configured to determine a migration schedule of each of the plurality of records based on the priority of each of the plurality of records.

Abstract: Implementations set forth herein relate to an automated assistant that allows third party applications to inject dependencies to leverage automated assistant functions. Furthermore, enabling such dependency injections can allow third party applications to preserve privacy of any application content that is used during execution of automated assistant functions. In some implementations, a third party application can initialize a function with an assistant dependency using parameters that are tagged as private. Initializing a function in such as a way can allow private content communicated between the third party application and the automated assistant to be abstracted for security purposes. The abstracted content can thereafter be communicated to a remote server—such as a server hosting an extensively trained machine learning model. Intelligent output provided by the server can then be incorporated into one or more processes of the third party application without comprising security.

Abstract: Methods, systems, apparatuses, and computer program products are provided for protecting data in a memory of an integrated circuit (IC). A process token is obtained in a special purpose IC from a host that is external to and communicatively connected to the special purpose IC. The process token is stored in a first memory portion of the special purpose IC. In response to receiving a processing request from the host, the processing request is processed, and data generated by processing the processing request is written in a second memory portion of the special purpose IC. When a read request is received to read the data in the second memory portion, a determination is made whether the read request includes a read token that matches the previously stored process token. If the read token matches the process token, the data in the second memory portion may be returned to the host.

Abstract: Disclosed herein are various embodiments, for a fast boot system. An example embodiment operates by determining that one or more programs have been loaded into memory on a boot-up of a device. A snapshot of the memory including the loaded one or more programs is captured. Operations of the device are monitored after the snapshot has been captured. It is determined that a first program of the one or more programs was updated during the monitoring. A restart of the device is detected, wherein the snapshot is loaded into the memory in lieu of loading the one or more programs, and wherein the first program is updated during the restart of the device.

Abstract: An apparatus comprises a processing device configured to register one or more applications to receive resource state change invocation calls from one or more assets of an information technology infrastructure, to detect resource state changes for the one or more assets of the information technology infrastructure, and to provide, from a given one of the one or more assets of the information technology infrastructure to a given one of the one or more applications, a given resource state change invocation call responsive to detecting one or more resource state changes for the given asset. The processing device is also configured to receive, from the given application, an instruction to initiate one or more reactive actions based at least in part on the detected one or more resource state changes for the given asset, and to apply at least one of the one or more reactive actions to the given asset.

Abstract: In one embodiment, a service in a network computes an expected information gain associated with rerouting traffic from a first tunnel onto a backup tunnel in the network. The service initiates, based on the expected information gain, rerouting of the traffic from the first tunnel onto the backup tunnel. The service obtains performance measurements for the traffic rerouted onto the backup tunnel. The service uses the performance measurements to train a machine learning model to predict whether rerouting traffic from the first tunnel onto the backup tunnel will satisfy a service level agreement (SLA) of the traffic.

Abstract: A firewall processing card from a plurality of firewall processing cards coupled to a chassis, is selected by a load balancing engine (or other mechanism) and receives the data packet over the fabric channel. First, if the session match exists to management-type data packets the data packet is returned to the I/O board and if a match exists to user data packets the data packet is sent to a firewall service of the firewall processing card. If no session match exists, the firewall processing card checks for a policy match to the data packet for creating a new session or drops the data packet. The I/O board receives the data packet returned from the processing blade over the base channel and checks for a session matching to the data packet. If a session match exists and the data packet is a management data packet, the data packet is sent to a management service at a user level of the I/O board and if not a management data packet the data packet is dropped.

Abstract: An online system monitors resources utilization by users connecting with the online system and detects unauthorized resource utilization caused by sharing of sessions. The online system collects samples of browser attributes from browsers interacting with the online system. The online system determines a score indicating a difference between two samples of browser attributes taken at different times. The online system uses the score to determine whether the two samples of browser attributes in the same session were received from different browsers. If the online system detects unauthorized resource utilization if the two samples are determined to be from two different browsers. The online system takes mitigating actions, for example, by invalidating the session or requiring users to re-enter credentials.

Abstract: Embodiments herein relate to replacing a legacy Pick environment with a modern microservice architecture. A legacy database and a modern database may be operated in parallel for data validation. Part of the data validation may include verifying that changes to a business object that are entered on the legacy Pick environment are similarly entered by the modern microservice architecture.

Abstract: Systems and methods for authenticating requests to use an Application Programming Interface (“API”) are described. In some embodiments, a request to use an API is issued from a client to a server. One or more credentials for a first-level authentication challenge are provided from the client to the server. Responsive to the server determining that the client deviates from an expected behavior based on comparing the request to use the API with a pattern of activity associated with the client, the client receives a second authentication challenge.

Abstract: The following relates generally to merchandise pickup location and/or pharmacy selection. In some embodiments, factors are used to determine a pharmacy and/or merchandise pickup location selection for an individual. In this regard, the factors may include: whether the pharmacy and/or merchandise pickup location has a merchandise item and/or medication in stock; wait time at the pharmacy and/or merchandise pickup location; geographic distance to the individual; travel time from the location of the individual; urgency of filling a prescription; price of a prescription; whether another product or class of products available at the pharmacy and/or merchandise pickup location; and/or whether a locker is available at the pharmacy and/or merchandise pickup location. In some embodiments, Artificial Intelligence (AI) is used to create a model of pharmacy and/or merchandise pickup location selection for the individual.

Abstract: Methods, systems, and media for identifying abusive content items are provided.

Abstract: Viewing and editing operations on a file having an unsupported file type are enabled through a method of opening the file through a remoting session. The method includes the steps of receiving login information from a user and determining if there is a recent open file request. In response to determining there is a recent open file request, the method includes the step of determining whether the file is synchronized. If the file is synchronized, the method includes the steps of launching an application within which the file can be opened, and opening the file within the application.

Abstract: A system performs a method including: generating a posture of a first microservice in a microservice based network environment; implementing the posture of the first microservice at a sidecar of the first microservice; distributing the posture of the first microservice to a sidecar of a second microservice in the microservice based network environment; implementing the posture of the first microservice at the sidecar of the second microservice; and controlling communication of personally identifiable information between the first microservice and the second microservice based on the posture of the first microservice through either or both the sidecar of the first microservice and the sidecar of the second microservice. The posture of the first microservice includes an identification of one or more types of personally identifiable information that the first microservice is authorized to distribute and one or more types of personally identifiable information that the first microservice is authorized to receive.

Abstract: A gateway or other network device may be configured to monitor endpoint behavior, and to request a verification of user presence at the endpoint under certain conditions suggesting, e.g., malware or other endpoint compromise. For example, when a network request is directed to a low-reputation or unknown network address, user presence may be verified to ensure that this action was initiated by a human user rather than automatically by malware or the like. User verification may be implicit, based on local behavior such as keyboard or mouse activity, or the user verification may be explicit, such as where a notification is presented on a display of the endpoint requesting user confirmation to proceed.

Abstract: Methods and systems for reducing database maintenance effort are disclosed. A method includes: collecting, by a computing device, a history of statistics for database objects; predicting, by the computing device, statistics using the history of statistics; testing, by the computing device, a workload using the predicted statistics; determining, by the computing device, at least one database object to maintain based on the testing the workload; and maintaining, by the computing device, the determined at least one database object.

Abstract: A computer security system with enhanced blacklisting includes administrative interfaces that accept user inputs to create and modify entries in a blacklist and a whitelist that define which programs are allowed to execute on one or more target computer systems. Upon an attempt to run a program, if the program is in the blacklist and not in the white list, the program is prevented from running. If the program is prevented from running, at a later time, an administrative interface is used to either block future execution of the program or to create an entry in the whitelist that allows future execution of a class of programs or only that the program until revoked. The whitelists and blacklists are for a single target computer or many computers.

Abstract: Methods and systems provided. A system may include a mobile surveillance unit positioned within an environment and including one or more sensors configured to detect one or more events occurring within or near the environment. The system may also include an application program configured to: convey data related to a detected event of the one or more events to an electronic device remote from the mobile surveillance unit; and in response to input associated with the detected event, convey, from the mobile surveillance unit, image data, video data, audio data, or any combination thereof, previously captured at the mobile surveillance unit and associated with the detected event.

Abstract: The present disclosure provides systems and methods for client-side anonymized content selections. The method includes collecting a plurality of identifications of content selection lists, each content selection list associated with the first device and at least one other device. The method includes selecting a first subset of the content selection lists, responsive to a total number of unique device associated with a plurality of content selection lists of the first subset exceeding a threshold. The method includes transmitting a request for an item of content, the request comprising identifications of the content selection lists of the selected first subset. The method includes receiving a first item of content selected by the content server based on the content selection lists of the selected first subset.

Abstract: Various embodiments for customizing a dynamic navigation system are described herein. An embodiment operates by receiving a request from a support user device for debug access to an application. A predetermined time period for which to provision a set of computing resources is identified and the set of computing resources are provisioned for a pod on a server. Both a first container including access to a new instance of the application and a second container providing access to a debugger program are generated for the pod. Upon determining that the predetermined time period has expired, access to the provisioned set of computing resources of the pod is revoked, and the provisioned set of computing resources to be made available for other processes of the server.

Abstract: Preemptive caching within content/name/information centric networking environment is contemplated. The preemptively caching may be performed within content/name/information centric networking environments of the type having a branching structure or other architecture sufficient to facilitate routing data, content, etc. such that one or more nodes other than a node soliciting a content object also receive the content object.

Abstract: Embodiments relate to systems, devices, and computer-implemented methods for providing secure access to a shared registration system of a domain name registry by generating authorization information associated with a domain name, storing the authorization information in an archive, receiving, from a non-registrar service provider, a request for access to functionality of a shared registration system of the domain name registry, where the request is associated with the domain name and includes authorization information, determining whether the received authorization information is valid using the archived authorization information, and allowing the non-registrar service provider access to the functionality of the SRS based on a determination that the second authorization information is valid.

Abstract: A content server can extend enterprise content management to a leading system in an efficient, automated, and seamless manner by leveraging the permission information provided by the leading system. The content server can sync the permission information with the leading system, evaluate user-manager relations, role-based rule definitions, and user-group associations defined in the leading system, and determine and/or update role memberships for workspaces created in the content server for users in the leading systems. In this way, even though the content server and the leading system have very different types of roles and permission models, the content server can evaluate complex relationships and role-based rules and intelligently, correctly, and quickly assign the right people to the right roles in the right workspaces in the content server.

Abstract: An alarm analysis method, including determining M alarm pairs in a first alarm set, where each alarm pair of the M alarm pairs includes a first alarm and a second alarm having an association, generating, according to an association rule, a first feature set of N alarm pairs, the first alarm of each alarm pair of the N alarm pairs being an alarm pair root in the first feature set, the first feature set including a first probability that a first subsystem to which each first alarm belongs is a subsystem root and a first alarm object is an alarm object root and a second probability that a second subsystem to which each second alarm belongs is a subsystem root and a second alarm object is an alarm object root, and determining root information of the first alarm set based on the first probability and the second probability.

Abstract: Systems and methods are provided herein for enabling a user to access a blocked media asset. These systems and methods allow a user to request that a parent, or another user, who can approve access to the blocked media asset approve access to the blocked media asset for viewing. The request may be transmitted as a notification to a mobile phone or another suitable device, such that the parent the other user can approve the request, even though they may be remote from the requesting user. Both the requesting user and the user whose approval is required to unblock the media asset (i.e., the approver), are identified by the system based on an identifier associated with each user. This informs the approver which user submitted the request. Additionally, this also adds a layer of security, since the approver must enter an identifier to authenticate their identity to the system before being able to unblock the program for the requesting user.

Abstract: A system including a network interface and a processing circuit is provided. The processing circuit includes one or more processors coupled to non-transitory memory. The processing circuit is structured to receive a request for a multiple custody linkage between user devices. The multiple custody linkage includes a digital connection between the user devices that allows shared access to a resource. The resource includes at least one of a physical object or information. The processing circuit is further structured to perform a validation process based on information in the request for the multiple custody linkage to determine if a violation of a security protocol exists. The security protocol is associated with security of the resource. The processing circuit is further structured to, in response to determining no violation of the security protocol exists, activate the multiple custody linkage between the user devices to allow the shared access to the resource.

Abstract: A system and method are provided which include receiving, by a server computer from a trusted entity computer, user data corresponding to a user. Based on the user data, the server computer determines a set of assertions for the user. The server computer receives, from a relying entity, an assertion request for the user. Responsive to the assertion request, the server computer provides, to the relying entity, an assertion, of the set of assertions. The relying entity thereby grants the user a particular type of account based on the assertion.

Abstract: A proxy server receives a synchronization request from an application program resident on a user device. The proxy server determines that the user device requires removal of application program data and synchronizes the application program resident on the user device with a null account that is associated with application program.

Abstract: A method includes acquiring, based on a restaurant ID, menu information indicating dishes provided by a restaurant corresponding to the restaurant ID from a second server related to the restaurant via a network, transmitting identification information stored in an information terminal to a first server, acquiring, from a first server, allergy information related to a user based on the identification information, generating, based on the menu information and the allergy information, a personalized menu arranged for the user according to the allergy information, displaying the personalized menu on a second operation screen for accepting an order of a dish in the restaurant, the second operation screen being displayed on a display of the information terminal of the user, and transmitting ordered-dish information representing the dish selected from the personalized menu to the second server.

Abstract: Embodiments improve application gateway architecture by pushing secure managed service boundaries. Managed services that were previously available directly in application gateway code are separated from application gateway code and exposed to service clients in a controlled, secured manner via a RESTful API layer dedicated to the management and interaction of deployed managed services. The separation can be realized in management agents. A management agent receives a service request from an application and makes an API call to the dedicated management API layer of the managing application gateway. The application may run within a managed container on a user device. Responsive to the API call, the application gateway sends a control or configuration message to the management agent over HTTP. The management agent controls or configures the managed service to function or behave as dictated by the application gateway.

Abstract: Apparatus, systems, and methods for managing a network. One or more network devices on a network and a QoS policy are periodically evaluated. A QoS operational status of the network is evaluated and a remediation action is implemented based on the evaluation of the QoS operational status of the network and the evaluation of the QoS policy, the remediation action comprising adjusting a bandwidth allocation for each of one or more queues.

Abstract: Federation policy exchange is provided in response to receiving a sharing query from an Access Point (AP) indicating that an associated wireless network supports federated identities with data sharing, determining whether the sharing query is within sharing preferences; and in response to determining that the sharing query is within the sharing preferences, transmitting, to the AP, a positive response for identity sharing that authorizes collection and sharing of identity data with at least one entity identified in a sharing policy for the associated wireless network. In various embodiments, federation policy exchange includes transmitting a support notification, via an AP, indicating support for federated identities with data sharing within a wireless network associated with the AP; and in response to receiving a first identify sharing preference from a User Equipment (UE) that indicates that negotiation is preferred, transmitting a sharing policy for the wireless network to the UE.

Abstract: Systems, computer program products, and methods are described herein for source independent but source value dependent transfer monitoring.

Abstract: A packet filtering system uses linked zero-based binary search trees to filter received packets. The binary search trees may be generated from filter conditions defining filter parameters for filtering packets.

Abstract: A Third Generation Partnership Project (3GPP) based network, such as an enterprise private 3GPP network, is operative to provide a guest onboarding of a device using a realm-based discovery of an identity provider and a mutual authentication of identity federation peers. A secure connection may be established between the peers so that the device may be authenticated based on credentials associated with a Subscriber Identity Module (SIM) provided by its Mobile Network Operator (MNO). Credentials may be extended to those associated with embedded SIMs (eSIMs), digital certificates from private enterprises, login and passwords, and identities from a wide range of identity providers. After device authentication, the 3GPP-based network is operative to select and enforce access policies according to an identity or other attribute of the device.

Abstract: A computer-implemented method of providing targeted content to a user includes generating a query index from a data corpus, the query index including a plurality of market segment-based queries, wherein each market segment-based query of the plurality of queries is configured to provide targeted content on a browser user interface of a user determined to be within a corresponding market segment.

Abstract: An approach for publishing posts on a social network through one or more user accounts with different levels of attribution is disclosed. A secure user account publishes a post through a programmatically linked buffer user account. The secure user account and the buffer user account are programmatically linked. Posts published via the buffer user account can be modified to add attribution image data or other visual indicators of the original post creator.

Abstract: Systems and methods for cloud security monitoring and threat intelligence in accordance with embodiments of the invention are disclosed. In one embodiment, a process for monitoring and remediation of security threats includes generating a threat model using a first portion of activity data, identifying, based upon the threat model, a threat using a second portion of activity data, selecting a security policy to implement in response to the identified threat, identifying cloud security controls in a remotely hosted cloud application server system to modify in accordance with the selected security policy, establishing a secure connection to the remotely hosted cloud application server system using login credentials associated with a tenant account with the cloud application, and sending instructions to the remotely hosted cloud application server system to set the identified cloud security controls with respect to the tenant account in accordance with the selected security policy.

Abstract: An electronic device can implement a zero-latency digital assistant by capturing audio input from a microphone and using a first processor to write audio data representing the captured audio input to a memory buffer. In response to detecting a user input while capturing the audio input, the device can determine whether the user input meets a predetermined criteria. If the user input meets the criteria, the device can use a second processor to identify and execute a task based on at least a portion of the contents of the memory buffer.

Abstract: A device management apparatus includes a communicator transmitting and receiving various types of data to and from the device; a management ID issuer issuing a unique management ID to the device; a storage that stores device specifying information of the device, the device specifying information including the management ID and predetermined device identification information; a display displaying, in a list of devices to be managed, the device to which the management ID is issued; and a controller controlling the communicator, the management ID issuer, the storage, and the display, where when the communicator has received a connection request from a device via the network, the controller judges whether the device has a management ID, and if the device has no management ID, the controller controls the management ID issuer to issue a unique management ID to the device and controls the communicator to transmit the unique management ID.

Abstract: It is proposed a technical solution to leverage the characteristics and generally speaking, the performance of DLT networks. This solution proposes building a federation of DLT networks which work together regardless of the underlying technologies to guarantee data consistency, wider consensus and enhanced trust. The proposed solution includes, among others, a distributed transport mechanism for the exchange of control data between the different networks of the federation; and the spread and storage of “proofs of history” of the network to protect and validate the connected networks integrity.

Abstract: Media, methods, and systems are disclosed for mitigating network resource contention. Event scheduling details are received regarding one or more virtual events. In response to determining that an upcoming virtual event will begin within a predetermined time threshold, various steps are performed. First, a predicted number of event participants is determined. Next, database artifacts associated with the upcoming virtual event are prefetched. Then static event display resources are accessed prior to a start of the upcoming virtual event, and the database artifacts and the static event display resources are cached. A network protocol request to access network resources is received from a client device. The database artifacts and the static event display resources are pushed to a client-side cache associated with the client device, and a minimal network response is transmitted to the client device.

Abstract: Techniques for maintaining and curating memories stored as data objects are described. A computing device receives a data object. The computing device analyzes, using a model, the data object to determine one or more classifications for the data object. The computing device stores the data object and the one or more classifications for the data object in a storage component of the computing device.

Abstract: Systems and methods are provided for migration of workspaces configured in an IHS (Information Handling System). According to one embodiment, an IHS includes a workspace orchestration service that is executed to manage deployment of workspaces on the IHS; and computer-executable instructions to receive a request to migrate a first workspace from the IHS to a computing platform external to the IHS. Upon receipt of the request, the instructions instantiate a second workspace on the computing platform while the first workspace continues to operate on the IHS, and when the second workspace has been instantiated, copy one or more state-based parameters from the first workspace to the second workspace. When the state-based parameters have been configured on the second workspace, commence operation on the second workspace.

Abstract: The present disclosure provides data-driven methods and apparatuses for predicting user inquiries. One exemplary method includes: collecting user behavior data and pre-processing the user behavior data when a user inquiry is received; extracting candidate user behavior data that is contributive to the user inquiry from the pre-processed user behavior data; screening the candidate user behavior data based on a set target behavior data set, and selecting candidate user behavior data that is contained in the target behavior data set; inputting the screened candidate user behavior data into a trained classifier model; and predicting an inquiry category to which the user inquiry belongs. One exemplary apparatus includes a pre-processing module, an extraction module, and a prediction module. The method and the apparatus embodiments of the present disclosure can improve the efficiency and accuracy of the prediction.

Abstract: A method of assigning IP addresses to devices of a building control network includes receiving a selection of selected devices of a plurality of devices from a user interface. The selected devices are displayed in a predetermined order on a display. A proposed static IP address for a first device in the predetermined order of the selected devices is received from the user interface. A static IP address is sequentially assigned to each of the selected devices following the first device in accordance with the predetermined order, assuming the subnet mask has been confirmed as valid. The selected devices in the predetermined order along with the assigned static IP addresses for each of the selected devices are displayed on the display. The assigned static IP address for each of the selected devices are downloaded to the corresponding one of the selected devices.

Abstract: Aspects of the subject disclosure may include, for example, analyzing data to identify that the data is associated with an online game, translating, based on the analyzing, a first address associated with the data to a second address that is different from the first address, and transmitting the data to a communication device using the second address. Other embodiments are disclosed.

Abstract: A method and system to provide multi-layered access control for healthcare datasets are disclosed. The method comprises defining an information policy for each of healthcare datasets, wherein the information policy comprises information access permissions. Further, an organization policy is defined for each of the healthcare datasets, wherein the organization policy comprises license permissions for organizations accessing the healthcare datasets. Thereafter, a user account master policy is defined for each of the healthcare datasets, wherein the user account master policy comprises account permissions assigned to users of the organizations. Subsequently, a master user policy is generated for each of the users based on the information policy, the organization policy, the user account master policy, or a combination thereof, wherein the master user policy comprises access control permissions to provide each of the users access to the healthcare datasets.