Systems and methods for partial content highlighting are provided. The method begins with receiving a workbook document. Cell data of the workbook document is pre-processed. For each worksheet of the workbook document, the cell data is indexed to generate an indexed file. When the cell data is indexed, the indexed file is stored in a key-value store associated with the workbook document. The key-value store is configured to store the indexed cell data in key-value pairs, where a value includes a position of a key. A search term is received and converted into a regular expression. For every key of the key-value store, a determination is made whether the regular expression matches the key. When the regular expression matches the key, occurrence information is determined. Based on the occurrence information, a graphical user interface is generated and displayed to show partial text highlighting of the text of the search result.
Embodiments include hyperdimensional computing (HDC) malware classification systems and methods. An input, such as a classification request or search request, for processing using hyperdimensional computing malware classification can be received and a plurality of features extracted for the input. For example, if the input indicates an object, such as a file to be classified, detection features can be extracted for the object. If the input includes a search query, search features can be extracted. A new hyperdimensional vector can be generated using the features and evaluated using a hyperdimensional hash table to identify a responsive malware category for the input. The hyperdimensional hash table may be based on a collection of data comprising known samples of malware from a plurality of malware categories. The responsive category may be used, for example, to classify a malware sample or as a relevant category for a search query.
Systems, methods and products for synchronization of content and metadata where the content and metadata are shared from a source repository to a target repository. One embodiment of a repository connector system utilizes a monolithic robotic server for scheduled synchronization and a second monolithic manual server for processing manual synchronization requests. A metadata server in the connector system enables sharing and synchronization of mapped metadata between content objects in the source and target repositories. A notification server is provided in the connector system to track notifications of changes to shared content in the target repository, and to replicate these notifications in a local database that is accessible by the synchronization servers to identify changes to the content in the second repository. Each of the servers is coupled to a service registry in the connector system to enable discovery and interaction between the connector system components.
Embodiments provide systems and methods for capturing data for archiving from a multitenant system. A definition of the data to capture may include a capture control option for controlling the users in a target tenant for which to capture data. A capture system retrieves the target users associated with the capture control option from the multitenant system and captures data for the target users from the multitenant system for archiving.
Systems and methods enable browser-based online editing and real-time co-authoring of documents stored in on-premises content management systems using a cloud-based online editor without permanently moving the documents to the cloud. An on-premises Online Editing Service (OES) connector service, together with an event hub, notification database, notification service, and heartbeat monitoring, bridges the on-premises repository with the cloud-based editor while preserving on-premises permissions, versioning, and document control. In another embodiment, native desktop client applications are directly integrated with the on-premises repository through the cloud-based online editing infrastructure. A remote editing service server authenticates with the OES connector service, which validates on-premises user permissions and provides an authorized folder structure and documents directly to the native desktop client.
One embodiment comprises a system for artificial intelligence-based evaluation of an agent interaction. The system is operable to generate a transcript of the voice session recording of the call and parse the evaluation form to identify the evaluation question for an intended call participant interaction. The system is further operable to determine, using the machine learning model, that the intended call participant interaction of the evaluation question is present in the transcript. When the intended call participant interaction is present in the transcript, the system records a first answer for to the evaluation question corresponding to the voice session recording, the first answer indicating a presence of the intended call participant interaction in the voice session recording and automatically sets the answer control in the visual display to indicate the presence of the intended call participant interaction in the voice session recording.
Systems and methods are provided for enabling a trusted and secured client-server model in a container orchestration environment. Various embodiments provide a trusted and secured client-server model leverages the concept of self-signed TLS certificates to automate and efficiently manage TLS connections. In some embodiments a Kubernetes API server injects a service token into each pod in a cluster. The Kubernetes API server also injects the certificate used to generate the service token. In a client server model between pods, clients can use the same service token as its identity to the server and the server can use the same certificate for validating the token. In this way, trust is established using token-based authentication between clients and servers.
H04L 41/0663 - Gestion des fautes, des événements, des alarmes ou des notifications en utilisant la reprise sur incident de réseau en réalisant des actions prédéfinies par la planification du basculement, p. ex. en passant à des éléments de réseau de secours
8.
Data-Driven Optical Character Recognition (OCR) Utilizing Multiple OCR Engines
Systems and methods for extrinsic data driven OCR utilizing multiple OCR engines are disclosed. Embodiments as disclosed herein may determine data on OCR engines employed by an OCR system during an OCR engine evaluation process to generate extrinsic data on each OCR engine. This extrinsic data can then be used by embodiments of OCR systems employing these multiple OCR engines when performing OCR on an image.
G06V 30/19 - Reconnaissance utilisant des moyens électroniques
G06V 10/75 - Organisation de procédés de l’appariement, p. ex. comparaisons simultanées ou séquentielles des caractéristiques d’images ou de vidéosApproches-approximative-fine, p. ex. approches multi-échellesAppariement de motifs d’image ou de vidéoMesures de proximité dans les espaces de caractéristiques utilisant l’analyse de contexteSélection des dictionnaires
G06V 10/776 - ValidationÉvaluation des performances
Examples of the present disclosure describe systems and methods for state-based entity behavior analysis. In an example, entities of a computing environment may be represented using a hierarchical entity web. In some examples, an entity may have a state associated with it, which may be modeled using a place/transition (PT) network. Events within the computing environment may be evaluated by transitions of a PT network to determine whether an entity should change state. If an entity transitions from one state to another, one or more actions may be performed, including, but not limited to, taking a remedial action, generating a recommendation, and updating the state of one or more associated entities. Thus, aspects disclosed herein may provide a high-level overview of the state of entities of a computing environment, but may also be used to view in-depth information of entities at lower levels of the hierarchical entity web.
H04L 41/0853 - Récupération de la configuration du réseauSuivi de l’historique de configuration du réseau en recueillant activement des informations de configuration ou en sauvegardant les informations de configuration
H04L 41/0654 - Gestion des fautes, des événements, des alarmes ou des notifications en utilisant la reprise sur incident de réseau
H04L 41/0816 - Réglages de configuration caractérisés par les conditions déclenchant un changement de paramètres la condition étant une adaptation, p. ex. en réponse aux événements dans le réseau
H04L 41/084 - Configuration en utilisant des informations préexistantes, p. ex. en utilisant des gabarits ou en copiant à partir d’autres éléments
10.
Configurable Large Language Model Integration and Management Across Cloud and On-Premises Environments
The present disclosure provides a system for integrating and managing large language models (LLMs) across cloud and on-premises environments. The system allows organizations to flexibly configure and deploy multiple LLMs. Some features include a model administration module for managing execution parameters, an orchestrator service for deploying and maintaining models, and a conversion service for standardizing models into a common format.
The present disclosure provides a system for integrating and managing large language models (LLMs) across cloud and on-premises environments. The system allows organizations to flexibly configure and deploy multiple LLMs. Some features include a model administration module for managing execution parameters, an orchestrator service for deploying and maintaining models, and a conversion service for standardizing models into a common format.
The present disclosure provides a comprehensive solution for seamless integration, customization, and management of LLMs, ensuring optimal performance across diverse platforms.
The present disclosure pertains to dynamic query classification and routing in multi-model AI (Artificial Intelligence) architectures. A method includes receiving a user query at a computing device, generating an embedding representation of the query using a pre-trained language model, and applying a trained classifier to the embedding representation to determine the query's type. The classifier categorizes the query into one of three types: information retrieval, document retrieval, or document summary. A response is then generated based on the classified query type, enhancing the system's ability to provide relevant and accurate results to users.
Systems and methods for context-based annotation analyzation are provided. A system and method provides an artificial intelligence (AI) solution that aims to automate, accelerate, and enhance the accuracy of managing annotations and comments, thereby minimizing the risks associated with manual processing. The system and method leverages AI models to contextually identify and understand annotations within documents, allowing for precise summarization and enabling advanced search capabilities based on these annotations.
Aspects of the present disclosure are operable to protect against malicious objects, such as JavaScript code, which may be encountered, downloaded, or otherwise accessed from a content source by a computing system. In an example, antivirus software implementing aspects disclosed herein may be capable of detecting malicious objects in real-time. Aspects of the present disclosure aim to reduce the amount of time used to detect malicious code while maintaining detection accuracy, as detection delays and/or a high false positive rate may result in a negative user experience. Among other benefits, the systems and methods disclosed herein are operable to identify malicious objects encountered by a computing system while maintaining a high detection rate, a low false positive rate, and a high scanning speed.
Embodiments of the present disclosure provide systems and methods to classify webpages according to phishing risk. Embodiments combine generative AI with a knowledgebase of anti-phishing questions. To classify a webpage, the generative AI processes details from the webpage to answer the anti-phishing questions. The webpage is classified at least in part based on the results generated by the generative AI.
Systems, methods and products for enabling parallelized verification of a forensic copy generated using a non-parallelizable hashing algorithm. Disclosed embodiments generate the forensic copy of a data source using a non-parallelizable algorithm. In addition to generating a hash of the source data, intermediate hash states are stored for successive blocks of data from the data source. During verification of the forensic copy, the intermediate hash states and identifiers of the data blocks are retrieved from a data structure that is saved with the forensic copy. The non-parallelizable algorithm is used to hash each data block using the intermediate hash state preceding the data block as a starting hash state, then the hash of the data block is compared to the intermediate hash state following the data block to verify the data block. If all data blocks are successfully verified, the forensic copy is verified, otherwise verification fails.
H04L 9/06 - Dispositions pour les communications secrètes ou protégéesProtocoles réseaux de sécurité l'appareil de chiffrement utilisant des registres à décalage ou des mémoires pour le codage par blocs, p. ex. système DES
H04L 9/00 - Dispositions pour les communications secrètes ou protégéesProtocoles réseaux de sécurité
16.
RESTRICTING ACCESS TO APPLICATION PROGRAMMING INTERFACES (APIs)
Examples of the present disclosure describe systems and methods for restricting access to application programming interfaces (APIs). For example, when a process calls an API, the API call may be intercepted by a security system for evaluation of its trustfulness before the API is allowed to run. Upon intercepting an API call, the process calling the API may be evaluated to determine if the process is known to the security system, such that known processes that are untrusted may be blocked from calling the API. Further, when the security system cannot identify the process calling the API, the security service may evaluate a call stack associated with the call operation to determine if attributes of the call operation are known to the security system. If the call operation is known to the security system as untrusted, the call operation may be blocked from calling the API.
G06F 21/51 - Contrôle des utilisateurs, des programmes ou des dispositifs de préservation de l’intégrité des plates-formes, p. ex. des processeurs, des micrologiciels ou des systèmes d’exploitation au stade du chargement de l’application, p. ex. en acceptant, en rejetant, en démarrant ou en inhibant un logiciel exécutable en fonction de l’intégrité ou de la fiabilité de la source
G06F 21/52 - Contrôle des utilisateurs, des programmes ou des dispositifs de préservation de l’intégrité des plates-formes, p. ex. des processeurs, des micrologiciels ou des systèmes d’exploitation au stade de l’exécution du programme, p. ex. intégrité de la pile, débordement de tampon ou prévention d'effacement involontaire de données
G06F 21/62 - Protection de l’accès à des données via une plate-forme, p. ex. par clés ou règles de contrôle de l’accès
A computer-implemented method for browser extension authentication. A browser extension of a web browser on a mobile device requests an authentication key from a remote service. The browser extension receives the authentication key from the remote service. The browser extension provides the authentication key to a native mobile application on the mobile device. The native mobile application sends the remote service data to be mapped to the authentication key as mapped data. The browser extension requests the mapped data corresponding to the authentication key and receives the mapped data. The browser extension authenticates using the mapped data received from the remote service.
Display screen or portion thereof with graphical user interface for visualizing connections between base entities of a story corresponding to a security issue
A web editing environment integrated with a web assessment platform for auditing and ameliorating a web page under design in the context of the editing environment is disclosed.
Presentations are often broadcast or video recorded without handouts, such as the slides presented by a presenter of the presentation. Without handouts it is difficult and resource intensive to identify a particular slide of interest. Systems and methods are provided to automatically convert frames of a presentation video (e.g., a file or broadcast) to images in a document (e.g., Word™, PDF, etc.). Frames of the presentation are included in the document unless excluded. The frames are excluded when determined to be duplicative of a previous frame. Frames are duplicative if they are determined to be identical or nearly identical when hashed via an image hashing function. A non-identical frame is further determined to be duplicative when not identical to a previous frame but the differences are limited to only irrelevant visual content (e.g., the presenter gesturing).
G06T 11/60 - Édition de figures et de texteCombinaison de figures ou de texte
G06F 40/166 - Édition, p. ex. insertion ou suppression
G06V 10/74 - Appariement de motifs d’image ou de vidéoMesures de proximité dans les espaces de caractéristiques
G06V 10/774 - Génération d'ensembles de motifs de formationTraitement des caractéristiques d’images ou de vidéos dans les espaces de caractéristiquesDispositions pour la reconnaissance ou la compréhension d’images ou de vidéos utilisant la reconnaissance de formes ou l’apprentissage automatique utilisant l’intégration et la réduction de données, p. ex. analyse en composantes principales [PCA] ou analyse en composantes indépendantes [ ICA] ou cartes auto-organisatrices [SOM]Séparation aveugle de source méthodes de Bootstrap, p. ex. "bagging” ou “boosting”
G06V 10/82 - Dispositions pour la reconnaissance ou la compréhension d’images ou de vidéos utilisant la reconnaissance de formes ou l’apprentissage automatique utilisant les réseaux neuronaux
G06V 20/40 - ScènesÉléments spécifiques à la scène dans le contenu vidéo
G06V 40/10 - Corps d’êtres humains ou d’animaux, p. ex. occupants de véhicules automobiles ou piétonsParties du corps, p. ex. mains
21.
EVENT LOGGING PROTOCOL CONNECTOR SYSTEMS AND METHODS
Embodiments provide systems and methods for logging events. A computer-implemented method, for example, includes a syslog connector providing a subscription to a cloud source that collects events from a plurality of data sources, the subscription comprising an event selection criterion, receiving event records from the cloud source according to the subscription, the received event records formatted according to a first format, transforming the event records received from the cloud source from the first format to syslog messages and storing, by the syslog connector, the syslog messages to a syslog data sink.
Embodiments of systems and methods for DNS smart access are disclosed herein. In particular, certain embodiments include a local cache of trusted addresses resolved by a trusted DNS resolver. A DNS smart access agent monitors outbound communications from applications or processes on a client device. The DNS smart access agent blocks access to addresses that were not resolved through the trusted DNS resolver.
H04L 61/4511 - Répertoires de réseauCorrespondance nom-adresse en utilisant des répertoires normalisésRépertoires de réseauCorrespondance nom-adresse en utilisant des protocoles normalisés d'accès aux répertoires en utilisant le système de noms de domaine [DNS]
Systems, methods and products for performing file retention operations in a system in which a content management system accesses multiple cloud-based data stores that are compliant with a common file transfer protocol, but use different vendor-specific protocols for file retention operations, where a retention framework is coupled between the content management system and the data stores. The content management system performs file access operations by accessing an SDK that generates requests for these operations which follow the common set of protocols. The content management system performs file retention operations by accessing a retention framework that uses the information received from the content management system to identify the targeted file, identify the data store in which the targeted file is stored, and generate a request for a retention operation that is configured according to the data-store-specific retention protocols which correspond to the identified data store.
A client-side anti-phishing solution provides an anti-phishing browser plug-in and an anti-phishing module on a user device for initiating an anti-phishing operation on the user device as a user enters a login credential on a web page originating from a website. The anti-phishing operation comprises generating a random number of phishing credentials based on the login credential, randomly selecting, from the random number of phishing credentials, a phishing credential, and causing a browser application on the user device to submit the phishing credential to the website on behalf of the user. Depending upon whether the phishing credential is accepted by the website, access to the website is blocked or allowed. Since the client-side anti-phishing solution does not need to rely on complex machine learning models to classify unknown websites, active phishing websites can be quickly and effectively blocked from procuring user credentials before submission.
Embodiments of systems and methods for the conversion of identified fragments of documents to reusable tables are disclosed herein. Embodiments may use fragments and location metadata of the fragments to generate a reusable table in a format consumable by multiple document authoring platforms such as a standard format for data representation of interchange, including text-based formats such as Javascript Object Notation (JSON). The reusable table generated from the fragments and metadata of the original document may be represented with a corresponding reusable object. As such, this table may be reusable across a number of document platforms.
G06F 40/177 - Édition, p. ex. insertion ou suppression de tableauxÉdition, p. ex. insertion ou suppression utilisant des lignes réglées
G06V 30/412 - Analyse de mise en page de documents structurés avec des lignes imprimées ou des zones de saisie, p. ex. de formulaires ou de tableaux d’entreprise
Systems, methods and products for providing a dynamic bookmarks list feature. In one embodiment, a user provides a name and an endpoint to a module that creates a dynamic bookmark in a web browser. When the dynamic bookmark is accessed, an API call is made to the endpoint. The endpoint recognizes a query parameter in the API call and retrieves a list of bookmarks and/or folders of bookmarks and returns them to the browser. The browser presents the bookmarks and/or folders to the user in a list in the same manner as individual, manually created bookmarks are presented. The user then accesses any of the listed bookmarks in the same manner as a conventional, manually created bookmark. The contents of listed folders may not be retrieved until the folder is accessed. These contents are retrieved in the same way the listed bookmarks and folders were retrieved.
G06F 16/955 - Recherche dans le Web utilisant des identifiants d’information, p. ex. des localisateurs uniformisés de ressources [uniform resource locators - URL]
G06F 16/9538 - Présentation des résultats des requêtes
H04L 67/02 - Protocoles basés sur la technologie du Web, p. ex. protocole de transfert hypertexte [HTTP]
Embodiments provide systems and methods for identifying domain name service (DNS) resolvers. A computer-implemented method includes detecting a request from a client device to a destination. The method further includes sending a DNS request from the client device to the destination, receiving, at the client device, a DNS response from the destination, identifying the destination as a DNS resolver based on receiving the DNS response, and based on identifying the destination as a DNS resolver, blocking, at the client device, connections to the destination.
H04L 61/4511 - Répertoires de réseauCorrespondance nom-adresse en utilisant des répertoires normalisésRépertoires de réseauCorrespondance nom-adresse en utilisant des protocoles normalisés d'accès aux répertoires en utilisant le système de noms de domaine [DNS]
H04L 67/1036 - Répartition de la charge des demandes adressées aux serveurs pour des services autres que la fourniture de contenu à utilisateur, p. ex. répartition des charges entre serveurs de noms de domaine
H04L 61/30 - Gestion des noms de réseau, p. ex. utilisation d'alias ou de surnoms
Embodiments provide systems and methods for identifying domain name service (DNS) resolvers. A computer-implemented method includes detecting a request from a client device to a destination. The method further includes sending a DNS request from the client device to the destination, receiving, at the client device, a DNS response from the destination, identifying the destination as a DNS resolver based on receiving the DNS response, and based on identifying the destination as a DNS resolver, blocking, at the client device, connections to the destination.
H04L 61/4511 - Répertoires de réseauCorrespondance nom-adresse en utilisant des répertoires normalisésRépertoires de réseauCorrespondance nom-adresse en utilisant des protocoles normalisés d'accès aux répertoires en utilisant le système de noms de domaine [DNS]
An intelligent integration system runs a workflow implementation in a test mode with an avatar, a set of handlers, and a choreography. The system receives a message from the second entity to the first entity via their respective avatars. The arrival of data in the message triggers the first entity to invoke an integration activity which utilizes the set of handlers. The integration activity follows the choreography and moving the data through the choreography is defined and governed by a choreography key. The system may stop moving the data through the choreography, determine/generate a handler that can meet a requirement of the choreography key that is not met by the set of handlers, and update the workflow implementation to include the handler. The system may then continue or restart the workflow implementation with the handler that can meet the requirement of the choreography key.
Embodiments of document processing systems and methods for intelligent zonal recognition and context mapping are disclosed. These document processing systems and methods may utilize image processing and heuristic techniques to determine key zones from a minimal set of example documents of a document type and map those key zones to a context definition.
G06V 30/414 - Extraction de la structure géométrique, p. ex. arborescenceDécoupage en blocs, p. ex. boîtes englobantes pour les éléments graphiques ou textuels
G06V 30/412 - Analyse de mise en page de documents structurés avec des lignes imprimées ou des zones de saisie, p. ex. de formulaires ou de tableaux d’entreprise
G06V 30/418 - Appariement de documents, p. ex. d’images de documents
31.
SYSTEMS AND METHODS FOR CROSS-PLATFORM DOCUMENT PROCESSING AND LIFECYCLE MANAGEMENT INTEGRATION WITH ARTIFICIAL INTELLIGENCE CONTENT ASSISTANT
A document process automation system includes a user interface for uploading a document and invoking an artificial intelligence (AI) content assistant. When invoked, a chat window for the Al content assistant is displayed. The Al content assistant leverages a chat service to enable querying a status of the document through the chat window. The system further includes a document enrichment module, an inbound application programming interface (API), and a document API. The document enrichment module determines a category of the document and attaches attributes associated with the category to the document. The inbound API reads the document and creates a copy of the document for a document management system. The document API reads status updates to the copy of the document from a document queue and updates the attributes associated with the document. The user interface is configured for presenting the attributes thus updated as properties of the document.
Embodiments extract a layout from a digital image of a document, including performing an analysis of image data to identify areas of content and storing the identified areas as design elements of an electronic document template. Analyzing the image data to identify areas of interest includes testing a plurality of lines of pixels from the digital image against a background color definition to identify boundaries of a content area of interest. Content from the content area of interest is processed using a machine learning model to assign a content type for the content area of interest, where the machine learning model represents multiple types of content and is trained to assign content types to input content. The content area of interest is stored as a design element of a digital page template.
G06V 30/18 - Extraction d’éléments ou de caractéristiques de l’image
G06V 30/412 - Analyse de mise en page de documents structurés avec des lignes imprimées ou des zones de saisie, p. ex. de formulaires ou de tableaux d’entreprise
G06V 30/416 - Extraction de la structure logique, p. ex. chapitres, sections ou numéros de pageIdentification des éléments de document, p. ex. des auteurs
33.
METHOD AND SYSTEM FOR NEURAL NETWORK BASED DOCUMENT ACQUISITION
Systems and methods for text analysis are provided. Various embodiments of the present technology provide systems and methods for improved text analysis by providing a comprehensive robust solution that solves character-set identification and print type classification along with text detection from scene text images/documents. Systems and methods for improved text analysis integrate text detection, character-set identification, and print type classification into a unified framework.
G06V 30/414 - Extraction de la structure géométrique, p. ex. arborescenceDécoupage en blocs, p. ex. boîtes englobantes pour les éléments graphiques ou textuels
G06V 10/82 - Dispositions pour la reconnaissance ou la compréhension d’images ou de vidéos utilisant la reconnaissance de formes ou l’apprentissage automatique utilisant les réseaux neuronaux
G06V 30/413 - Classification de contenu, p. ex. de textes, de photographies ou de tableaux
34.
Trusted and secured client-server model in Kubernetes cluster pods
Systems and methods are provided for enabling a trusted and secured client-server model in a container orchestration environment. Various embodiments provide a trusted and secured client-server model leverages the concept of self-signed TLS certificates to automate and efficiently manage TLS connections. In some embodiments a Kubernetes API server injects a service token into each pod in a cluster. The Kubernetes API server also injects the certificate used to generate the service token. In a client server model between pods, clients can use the same service token as its identity to the server and the server can use the same certificate for validating the token. In this way, trust is established using token-based authentication between clients and servers.
G06F 21/00 - Dispositions de sécurité pour protéger les calculateurs, leurs composants, les programmes ou les données contre une activité non autorisée
H04L 41/0663 - Gestion des fautes, des événements, des alarmes ou des notifications en utilisant la reprise sur incident de réseau en réalisant des actions prédéfinies par la planification du basculement, p. ex. en passant à des éléments de réseau de secours
A computer-implemented method for activity monitoring with respect to online services. The method can include accessing a machine learning multiclass classifier, the machine learning multiclass classifier representing HTTP network request features and associated actions with respect to interacting with websites, receiving an HTTP request, extracting a feature set from the HTTP request, determining a request action classification for the HTTP request, determining the request action classification comprising processing the feature set extracted from the HTTP request to the machine learning multiclass classifier to classify the HTTP request, and providing access to the HTTP request and request action classification via an application programming interface.
Embodiments include an activity monitoring machine learning model method. One embodiment the method includes transforming HTTP network requests into feature vectors, each feature vector representing selected features from a corresponding HTTP network request and an action selected from a plurality of actions to be monitored and inputting the feature vectors into a machine learning model to train the machine learning model to classify new HTTP requests according to the plurality of actions, wherein the plurality of actions include an upload action and a download action.
H04L 67/02 - Protocoles basés sur la technologie du Web, p. ex. protocole de transfert hypertexte [HTTP]
G06F 16/955 - Recherche dans le Web utilisant des identifiants d’information, p. ex. des localisateurs uniformisés de ressources [uniform resource locators - URL]
Embodiments of systems and methods for DNS leak prevention and protection, including protection against DNS tunneling attacks, are disclosed herein. In particular, certain embodiments include a local DNS protection agent installed on a system and an associated trusted external DNS protection server. The DNS protection agent prevents DNS leaks from applications on the system such that all DNS requests from the system are confined to requests from the DNS protection agent to the associated DNS protection server. As the DNS leak prevention provided by the DNS protection agent stops applications on the system from circumventing the DNS protection server, all DNS requests originating from the system remain under the control of the DNS protection server and thus desired DNS protection (e.g., as implemented on the DNS protection server) may be maintained. Certain embodiments prevent applications from using certain DNS security protocols, such as DoH and DoT, without going through the DNS protection agent. Embodiments are also capable of detecting and addressing DNS tunneling attacks.
Integrated document scoring and prioritization systems and methods for enhanced document review in e-discovery are disclosed herein. An example includes combining a first vector of scores from one algorithm and a second vector of scores from another algorithm, both corresponding to a set of documents. Ground truth labels indicating document responsiveness are also acquired. A system calculates blending weights through a supervised learning algorithm, considering the scores and ground truth labels. These weights are then employed to combine the vector scores, yielding final ranking scores for each document. The system culminates in the creation of a sorted document list, where documents with higher final ranking scores are prioritized, signifying their increased relevance within the dataset.
GENERATION OF TRAINING IMAGES MIMICKING HANDWRITTEN TEXT INCLUDING NON-ALPHANUMERIC CHARACTERS FOR TRAINING OPTICAL CHARACTER RECOGNITION (OCR) MACHINE LEARNING MODELS
Training images mimicking handwritten text including one or more non-alphanumeric characters are used at least for training an optical character recognition (OCR) machine learning model. The train images are generated as follows. A character sequence format and the non-alphanumeric characters are specified. Character sequences in the specified character sequence format with the specified non-alphanumeric characters are generated using a regular expression pattern for the specified character sequence format. Synthetic handwritten images are generated for each character sequence. A handwritten text image-generating machine learning model for generating the training images is trained using at least the generated synthetic handwritten images. The training images mimicking the handwritten text including the non-alphanumeric characters are generated using the trained handwritten text image-generating machine learning model.
Systems and methods for event threat prioritization are provided. In some embodiments, an event priority engine receives event data detected by event agents executing on devices. The events are prioritized and ranked according to threat scores for events generated according to threat indicators which are fed event data and threat data. In some embodiments, security systems may take the approach of prioritizing events based on the endpoints from which they originate using attributes associated with those endpoints. In this way, events can be prioritized at least in part based on the damage to the enterprise that may occur if those events were to compromise security, not just the likelihood of those events actually resulting in a security breach.
G06F 21/57 - Certification ou préservation de plates-formes informatiques fiables, p. ex. démarrages ou arrêts sécurisés, suivis de version, contrôles de logiciel système, mises à jour sécurisées ou évaluation de vulnérabilité
G06F 21/62 - Protection de l’accès à des données via une plate-forme, p. ex. par clés ou règles de contrôle de l’accès
A computer-implemented method for parallel downloading of content includes connecting to a server through which a content is available, starting to download the content from the server to a client computer, determining whether to split the downloading of the content based on a set of factors, the set of factors comprising a network latency metric and a remaining download time to download a remaining amount of the content and based on a determination to split the downloading of the content, and in parallel to downloading a first part of the content from the server to the client computer, connecting to the server and downloading an additional part of the content from the server to the client computer.
H04L 67/61 - Ordonnancement ou organisation du service des demandes d'application, p. ex. demandes de transmission de données d'application en utilisant l'analyse et l'optimisation des ressources réseau requises en tenant compte de la qualité de service [QoS] ou des exigences de priorité
Examples of the present disclosure describe systems and methods of automatic inline detection based on static data. In aspects, a file being received by a recipient device may be analyzed using an inline parser. The inline parser may identify sections of the file and feature vectors may be created for the identified sections. The feature vectors may be used to calculate a score corresponding to the malicious status of the file as the information is being analyzed. If a score is determined to exceed a predetermined threshold, the file download process may be terminated. In aspects, the received files, file fragments, feature vectors and/or additional data may be collected and analyzed to build a probabilistic model used to identify potentially malicious files.
Document analysis systems and methods for the generation of a content-by-example log that expresses withheld documents in terms of a set of disclosed documents are disclosed. Additionally, document analysis systems and methods for the analysis of such a content-by-example log to determine withheld documents of interest without access to those withheld documents are disclosed.
Systems and methods for text localization are provided. Various embodiments of the present technology provide systems and methods for improved text localization algorithms that will help in enhancing the efficiency of text identification algorithms used for recognizing text in scanned documents prior to performing OCR, or other related applications. In some embodiments, regions of interest are identified on an image document indicating locations on the image document where text may be present. Individual words in the image document are identified based on space identification and region of interest clustering algorithms applied to the regions of interest in the image document.
G06V 30/18 - Extraction d’éléments ou de caractéristiques de l’image
G06V 30/19 - Reconnaissance utilisant des moyens électroniques
G06V 30/22 - Reconnaissance de caractères caractérisés par le type d’écriture
G06V 30/414 - Extraction de la structure géométrique, p. ex. arborescenceDécoupage en blocs, p. ex. boîtes englobantes pour les éléments graphiques ou textuels
Systems and methods are provided for more natural human-machine interactions. Artificial intelligence (AI) fails to consider the context of one question that is provided by a previous question. By preserving metadata (e.g., entities, intents, and topics and/or the question itself) for a particular question for use in a second question, which the user may not be aware of, an AI system, can more accurately select a relevant response. If the user changes the topic, a topic detection services will detect the change and exclude the metadata, which is now irrelevant, from influencing the response to the current question.
Disclosed is an anti-fraud message inspection solution that can provide an additional level of protection after incoming messages have been examined, at ingress, by enterprise protection mechanisms (e.g., firewalls, routers, gateways, etc. with virus scanning software) and before the messages arrive in application processing queues. The anti-fraud message inspection solution includes a message inspector downstream from the enterprise protection mechanisms. The message inspector receives an email that has passed a filtering mechanism at ingress, performs a plurality of checks on the email utilizing local database files, and places the email in a suspect queue or an application processing queue depending upon whether the email fails any of the plurality of checks or passes all the plurality of checks.
A document process automation system includes a user interface for uploading a document and invoking an artificial intelligence (AI) content assistant. When invoked, a chat window for the AI content assistant is displayed. The AI content assistant leverages a chat service to enable querying a status of the document through the chat window. The system further includes a document enrichment module, an inbound application programming interface (API), and a document API. The document enrichment module determines a category of the document and attaches attributes associated with the category to the document. The inbound API reads the document and creates a copy of the document for a document management system. The document API reads status updates to the copy of the document from a document queue and updates the attributes associated with the document. The user interface is configured for presenting the attributes thus updated as properties of the document.
Many documents, whether hardcopy or softcopy, require authentication for a particular use. Documents are often copied but knowing whether the contents of a document, even a copy of the document, have been altered can still be critical to the particular use. In one embodiment, a document's content is encoded with a symbolic representation, such as one or more Quick Response (QR) codes, derived from the document's content. Subsequent scanning of the document retrieves the document's content and the symbolic representation. The retrieved document's contents are then used to generate a symbolic representation of the content and compared to the content encoded in the symbolic representation. If the two match, the document has not been altered.
G06F 21/30 - Authentification, c.-à-d. détermination de l’identité ou de l’habilitation des responsables de la sécurité
G06K 19/06 - Supports d'enregistrement pour utilisation avec des machines et avec au moins une partie prévue pour supporter des marques numériques caractérisés par le genre de marque numérique, p. ex. forme, nature, code
G06V 20/00 - ScènesÉléments spécifiques à la scène
49.
SYSTEM AND METHODS FOR DETECTING ALTERED DOCUMENTS
Many documents, whether hardcopy or softcopy, require authentication for a particular use. Documents are often copied but knowing whether the contents of a document, even a copy of the document, have been altered can still be critical to the particular use. In one embodiment, a document's content is encoded with a symbolic representation, such as one or more Quick Response (QR) codes, derived from the document's content. Subsequent scanning of the document retrieves the document's content and the symbolic representation. The retrieved document's contents are then used to generate a symbolic representation of the content and compared to the content encoded in the symbolic representation. If the two match, the document has not been altered.
H04L 9/32 - Dispositions pour les communications secrètes ou protégéesProtocoles réseaux de sécurité comprenant des moyens pour vérifier l'identité ou l'autorisation d'un utilisateur du système
G06K 7/14 - Méthodes ou dispositions pour la lecture de supports d'enregistrement par radiation électromagnétique, p. ex. lecture optiqueMéthodes ou dispositions pour la lecture de supports d'enregistrement par radiation corpusculaire utilisant la lumière sans sélection des longueurs d'onde, p. ex. lecture de la lumière blanche réfléchie
G06K 19/06 - Supports d'enregistrement pour utilisation avec des machines et avec au moins une partie prévue pour supporter des marques numériques caractérisés par le genre de marque numérique, p. ex. forme, nature, code
50.
SYSTEMS AND METHODS FOR SCANNING DOCUMENTS TO A COLLABORATIVE CLOUD SYSTEM
Systems, methods and products for uploading scanned documents for collaboration. A user chooses, prior to uploading a document, whether the user wishes for the document to be converted to a text-searchable PDF and/or processed to recognize objects in the image. When the document is scanned, it is uploaded to the cloud based system with the user-selected options, and the PDF/image is processed. The upload may be a multipart, parallel upload to increase the speed of the upload. When the PDF/image is received at the cloud based system, it is processed according to the user-selected options to generate metadata (text or recognized objects) which is stored with the uploaded document. The PDF/image and metadata are shared with users who can then search the metadata for the PDF/image.
H04L 67/1097 - Protocoles dans lesquels une application est distribuée parmi les nœuds du réseau pour le stockage distribué de données dans des réseaux, p. ex. dispositions de transport pour le système de fichiers réseau [NFS], réseaux de stockage [SAN] ou stockage en réseau [NAS]
Systems, methods, and computer program products for adaptively splitting electronic chats are provided. One embodiment includes receiving an electronic chat comprising a set of electronic chat messages, each of the electronic chat messages in the set of electronic chat messages having a timestamp; determining a set of time gaps between the electronic chat messages from the set of electronic chat messages; determining a set of models that model the set of time gaps, selecting an optimum model from the set of models; based on selecting the single Gaussian distribution as the optimum model, determining that the electronic chat comprises a single electronic chat, and storing the set of electronic chat messages as the single electronic chat.
H04L 51/216 - Gestion de l'historique des conversations, p. ex. regroupement de messages dans des sessions ou des fils de conversation
H04L 12/18 - Dispositions pour la fourniture de services particuliers aux abonnés pour la diffusion ou les conférences
H04L 51/00 - Messagerie d'utilisateur à utilisateur dans des réseaux à commutation de paquets, transmise selon des protocoles de stockage et de retransmission ou en temps réel, p. ex. courriel
H04L 51/04 - Messagerie en temps réel ou quasi en temps réel, p. ex. messagerie instantanée [IM]
H04L 51/07 - Messagerie d'utilisateur à utilisateur dans des réseaux à commutation de paquets, transmise selon des protocoles de stockage et de retransmission ou en temps réel, p. ex. courriel caractérisée par l'inclusion de contenus spécifiques
H04L 51/21 - Surveillance ou traitement des messages
52.
SYSTEM AND METHODS FOR DETECTING ALTERED DOCUMENTS
Systems and methods are provided to validate an image. The image is segmented into a plurality of blocks and scrambled. A hash of the original image and scrambled image is then provided with a hash of the algorithms used (e.g., the segmenting algorithm, the scrambling algorithm, and/or the hashing algorithm). The foregoing hashes may be provided as a single, merged hash, and optionally as a quick response (QR) code. A recipient may then validate the image with a provided hash, which may comprise a merged hash that is separated into its constituent hashes. If the hashes match, the image is determined to be unaltered.
H04L 9/32 - Dispositions pour les communications secrètes ou protégéesProtocoles réseaux de sécurité comprenant des moyens pour vérifier l'identité ou l'autorisation d'un utilisateur du système
Examples of the present disclosure describe systems and methods for identifying anomalous network behavior. In aspects, a network event may be observed network sensors. One or more characteristics may be extracted from the network event and used to construct an evidence vector. The evidence vector may be compared to a mapping of previously-identified events and/or event characteristics. The mapping may be represented as one or more clusters of expected behaviors and anomalous behaviors. The mapping may be modeled using analytic models for direction detection and magnitude detection. One or more centroids may be identified for each of the clusters. A “best fit” may be determined and scored for each of the analytic models. The scores may be fused into single binocular score and used to determine whether the evidence vector is likely to represent an anomaly.
Systems, methods and products for intelligent delivery of communications, where a machine learning engine is trained to identify an output channel for delivery of a communication based on received context information and intended recipient information and to route the communication to the selected channel. An intelligent delivery task in a communication flow model is performed by the machine learning engine, which receives customer/recipient data such as age, region, gender, etc., and context data such as communication type, time of day, working hours, etc., and uses this data to determine which of a set of different channels is likely to be most effecting for sending the communication to the recipient. A user therefore does not have to build a complex static communication flow, but simply adds an intelligent delivery task to the flow. The output channel is dynamically selected and may vary for different recipients and communications.
The present disclosure describes systems and methods for detection and mitigation of malicious encryption. A security agent on an infected computing device may monitor data writes to disk, memory, or network transmission buffers for strings that may represent encryption keys or moduli. The security agent may apply one or more techniques to decode and parse the string to either identify or extract the keys, or rule out the string as containing an encryption key or modulus. If a key is identified, or its presence cannot be excluded, then the security agent may generate an alert and take mitigation actions.
Systems and methods for the design, deployment and utilization of targeted multimedia communications based upon audiences are disclosed. More specifically, embodiments may allow the targeting of communications to users in multiple media formats from the same multimedia communication templates and the delivery of such communications to users through multiple communication channels.
H04N 21/845 - Structuration du contenu, p. ex. décomposition du contenu en segments temporels
G10L 15/26 - Systèmes de synthèse de texte à partir de la parole
57.
ENTERPRISE CONTENT MANAGEMENT WITH CONTEXTUAL FUNCTIONALITY INCLUDING INTEGRATION WITH AUTOMOTIVE MEDIA SYSTEMS AND ASSOCIATED CONTEXTUAL FUNCTIONALITY
Embodiments of systems and methods for Enterprise Content Management (ECM) systems including ECM mobile applications that can tailor offered functionality based on an operating context of the ECM mobile application are disclosed. In particular, embodiments as disclosed may tailor workflow functionality offered by an ECM mobile application based on the operation of that ECM mobile application in an automotive media environment where the ECM application is connected to a car infotainment system using an automotive media interface.
B60K 35/26 - Dispositions de sortie, c.-à-d. du véhicule à l'utilisateur, associées aux fonctions du véhicule ou spécialement adaptées à celles-ci utilisant une sortie acoustique
Embodiments of systems and methods for the centralized configuration of distributed heterogeneous services are disclosed herein. Embodiments of such systems and methods may be utilized to configure one or more service instances executing in an enterprise computing environment where each of the set of service instance is one of a set of service types that may be different. These services may, for example, be off-cloud services associated with a cloud based computing platform.
Embodiments of systems and methods for integration of services into the provisioning of functionality for desktop applications on desktop computing devices using an embedded web browser at the desktop computing device adapted to access web pages incorporating libraries adapted for use with such services are disclosed.
H04L 67/025 - Protocoles basés sur la technologie du Web, p. ex. protocole de transfert hypertexte [HTTP] pour la commande à distance ou la surveillance à distance des applications
G06F 16/955 - Recherche dans le Web utilisant des identifiants d’information, p. ex. des localisateurs uniformisés de ressources [uniform resource locators - URL]
Systems, methods, and computer program products for adaptively splitting electronic chats are provided. One embodiment includes receiving, by an electronic discovery system, an electronic chat comprising a set of electronic chat messages, each of the electronic chat messages in the set of electronic chat messages having a timestamp; determining a set of time gaps between the electronic chat messages from the set of electronic chat messages, based on selecting a Gaussian mixture model as a model of the time gaps, splitting the set of electronic chat message into a set of conversations based on the Gaussian mixture model; performing a text analysis on the set of conversations based on a chat subject matter identified in the set of electronic chat messages; and splitting the set of conversations based on the chat subject matter.
G06F 18/2415 - Techniques de classification relatives au modèle de classification, p. ex. approches paramétriques ou non paramétriques basées sur des modèles paramétriques ou probabilistes, p. ex. basées sur un rapport de vraisemblance ou un taux de faux positifs par rapport à un taux de faux négatifs
According to one aspect of the present disclosure, the voice message analysis system receives a voice message from a voicemail system, performs a voice-to-text transcription, and applies a set of rules to the transcription of the voice message. The actions have associated data that is used when implementing the action. The rules specify criteria for triggering various actions that map to functions of the voicemail system or other functions. The actions have associated data that is used in implementing the actions. A voice message analysis system applies the voice message analysis rules to the transcript of the voice message. Based on a determination that the voice message matches a voice message analysis rule, the voice message system implements the appropriate action, such as by programmatically calling the appropriate function of the voicemail system and providing data for the function based on the data associated with the first action.
The present disclosure pertains to systems and methods for redacting and converting spreadsheet documents within eDiscovery applications. It specifically addresses the challenge of partial cell redaction in spreadsheets and securely embeds these redactions into converted PDF files. A method includes identifying sensitive information, applying redactions using delimiters and regular expressions, and converting the spreadsheet document into an output format, the output format incorporating the redaction in such a way that the redaction is non-reversible. This ensures the permanency of redactions, providing a secure method for handling confidential information in legal proceedings.
Embodiments of systems and methods for DNS leak prevention and protection are disclosed herein. In particular, certain embodiments include a local DNS protection agent installed on a system and an associated trusted external DNS protection server. The DNS protection agent prevents DNS leaks from applications on the system such that all DNS requests from the system are confined to requests from the DNS protection agent to the associated DNS protection server. As the DNS leak prevention provided by the DNS protection agent stops applications on the system from circumventing the DNS protection server, all DNS requests originating from the system remain under the control of the DNS protection server and thus desired DNS protection (e.g., as implemented on the DNS protection server) may be maintained. Certain embodiments prevent applications from using certain DNS security protocols, such as DoH and DoT, without going through the DNS protection agent.
H04L 61/4511 - Répertoires de réseauCorrespondance nom-adresse en utilisant des répertoires normalisésRépertoires de réseauCorrespondance nom-adresse en utilisant des protocoles normalisés d'accès aux répertoires en utilisant le système de noms de domaine [DNS]
H04L 67/60 - Ordonnancement ou organisation du service des demandes d'application, p. ex. demandes de transmission de données d'application en utilisant l'analyse et l'optimisation des ressources réseau requises
64.
ENDPOINT SECURITY SYSTEMS AND METHODS WITH TELEMETRY FILTERS FOR EVENT LOG MONITORING
An endpoint agent is enhanced with a kernel-level event tracing facility, an event manager having telemetry filters, a persistence manager, and a detection engine. The endpoint agent receives an instruction from a controller system to enable a selection of filters, including a custom-built telemetry filter for the kernel-level event tracing facility which feeds events to the event manager as they are occurring. The event manager determines which enabled telemetry filters are applicable to the events, apply them to identify events of interest, and provide those events to the detection engine which, in turn, applies detection filters to the events of interest to detect possible threats to the endpoint. The telemetry filters are evaluated in memory as the events are occurring. To increase the speed of processing, expression trees representing the telemetry filters can be compiled into machine code just in time of execution. The machine code executes extremely fast natively.
An integrated system for efficiently managing and reviewing multimodal media content in legal and document review contexts is presented. This system introduces synchronized, four-dimensional interface components that streamline the review of audio and video content. Features include the normalization and compression of media files for optimized playback, conversion of audio into searchable text, and a synchronized timeline view with audio waveforms and video thumbnails for precise navigation. Additionally, the system offers redaction capabilities, allowing for the selective removal of sensitive information from media content without compromising file integrity. The system offers a comprehensive solution for analyzing and managing multimedia content within eDiscovery tools.
A data processing system for artificial intelligence-based setting of controls in an evaluation interface comprising a data store storing: a plurality of transactions; a plurality of completed evaluations, each completed evaluation including an indication of a transcript portion associated with an evaluation answer. The system determines a word or phrase common to a first set of transcript portions associated with the evaluation answer; creates a first set of auto answer parameters that includes the word or phrase; auto answers the question for a set of test transactions to generate an auto answer for each test transaction; and based on a determination that the first set of auto answer parameters auto answered the question with a threshold level of accuracy, configures an evaluation system to use the first set of auto answer parameters to preset an answer control in an evaluation operator interface.
A firewall monitors network activity and stores information about that network activity in a network activity log. The network activity is analyzed to identify a potential threat. The potential threat is further analyzed to identify other potential threats that are related to the potential threat, and are likely to pose a future risk to a protected network. A block list is updated to include the potential threat and the other potential threats to protect the protected network from the potential threat and the other potential threats.
H04L 41/069 - Gestion des fautes, des événements, des alarmes ou des notifications en utilisant des journaux de notificationsPost-traitement des notifications
68.
Systems and methods for image content indexing and search
A computer-implemented method for content search, comprising accessing an image stored or to be stored in a repository that is searchable using a search index, applying a machine learning model to detect objects and actions in the image and updating the search index to index the image using the objects and actions detected in the image to enable searching of the image by the objects and actions detected in the image.
G06F 16/51 - IndexationStructures de données à cet effetStructures de stockage
G06F 16/583 - Recherche caractérisée par l’utilisation de métadonnées, p. ex. de métadonnées ne provenant pas du contenu ou de métadonnées générées manuellement utilisant des métadonnées provenant automatiquement du contenu
G06V 10/774 - Génération d'ensembles de motifs de formationTraitement des caractéristiques d’images ou de vidéos dans les espaces de caractéristiquesDispositions pour la reconnaissance ou la compréhension d’images ou de vidéos utilisant la reconnaissance de formes ou l’apprentissage automatique utilisant l’intégration et la réduction de données, p. ex. analyse en composantes principales [PCA] ou analyse en composantes indépendantes [ ICA] ou cartes auto-organisatrices [SOM]Séparation aveugle de source méthodes de Bootstrap, p. ex. "bagging” ou “boosting”
69.
Artificial intelligence based setting of controls in a user interface
One embodiment comprises a system for artificial intelligence-based evaluation of an agent interaction. The system is operable to generate a transcript of the voice session recording of the call and parse the evaluation form to identify the evaluation question for an intended call participant interaction. The system is further operable to determine, using the machine learning model, that the intended call participant interaction of the evaluation question is present in the transcript. When the intended call participant interaction is present in the transcript, the system records a first answer for to the evaluation question corresponding to the voice session recording, the first answer indicating a presence of the intended call participant interaction in the voice session recording, and automatically sets the answer control in the visual display to indicate the presence of the intended call participant interaction in the voice session recording.
Embodiments of the present disclosure provides systems and methods for automatically recommending layout information for templates and template elements during template design/editing. A computer-implemented method includes receiving, based on a user interaction with the graphical user interface, a request to add a template element to a template, determining a recommended layout for the template element based on a document event dataset and a layout information dataset, presenting the recommended layout for the template element in the graphical user interface as a first recommendation; adding the template element to the template formatted according to the recommended layout for the template element and storing the new template in a database of templates used to electronically generate documents. The document event dataset comprises data for user action events on electronic documents generated from template and the layout information dataset comprises layout information from the template.
G06F 3/0484 - Techniques d’interaction fondées sur les interfaces utilisateur graphiques [GUI] pour la commande de fonctions ou d’opérations spécifiques, p. ex. sélection ou transformation d’un objet, d’une image ou d’un élément de texte affiché, détermination d’une valeur de paramètre ou sélection d’une plage de valeurs
G06F 40/106 - Affichage de la mise en page des documentsPrévisualisation
71.
SYSTEMS AND METHODS FOR INTELLIGENT DELIVERY OF COMMUNICATIONS
Systems, methods and products for intelligent delivery of communications, where a machine learning engine is trained to identify an output channel for delivery of a communication based on received context information and intended recipient information and to route the communication to the selected channel. An intelligent delivery task in a communication flow model is performed by the machine learning engine, which receives customer/recipient data such as age, region, gender, etc., and context data such as communication type, time of day, working hours, etc., and uses this data to determine which of a set of different channels is likely to be most effecting for sending the communication to the recipient. A user therefore does not have to build a complex static communication flow, but simply adds an intelligent delivery task to the flow. The output channel is dynamically selected and may vary for different recipients and communications.
Methods, devices and computer program products facilitate the storage, access and management of log files that are associated with particular client devices. The log files provide a record of user or client device activities that are periodically sent to a data backup center. A dedicated log file server facilitates the processing and storage of an increasingly large number of log files that are generated by new and existing client devices. A storage server pre-processes the received log files to facilitate the processing and storage of the log files by the log file server. This Abstract is provided for the sole purpose of complying with the Abstract requirement rules. This Abstract is submitted with the explicit understanding that it will not be used to interpret or to limit the scope or the meaning of the claims.
G06F 16/10 - Systèmes de fichiersServeurs de fichiers
G06F 3/06 - Entrée numérique à partir de, ou sortie numérique vers des supports d'enregistrement
G06F 11/14 - Détection ou correction d'erreur dans les données par redondance dans les opérations, p. ex. en utilisant différentes séquences d'opérations aboutissant au même résultat
G06F 11/34 - Enregistrement ou évaluation statistique de l'activité du calculateur, p. ex. des interruptions ou des opérations d'entrée–sortie
G06F 16/17 - Détails d’autres fonctions de systèmes de fichiers
G06F 16/174 - Élimination de redondances par le système de fichiers
G06F 17/40 - Acquisition et consignation de données
73.
SYSTEM AND METHOD FOR PREDICTING DOMAIN REPUTATION
A computer system comprising a processor and a memory storing instructions that, when executed by the processor, cause the computer system to perform a set of operations. The set of operations comprises collecting domain attribute data comprising one or more domain attribute features for a domain, collecting sampled domain profile data comprising one or more domain profile features for the domain and generating, using the domain attribute data and the sampled domain profile data, a domain reputation assignment utilizing a neural network.
A text mining engine running on an artificial platform is trained to perform conversation role identification, semantic analysis, summarization, language detection, etc. The text mining engine analyzes words in a transcript that represent unique characteristics of a conversation and, based on the unique characteristics and utilizing classification predictive modeling, determines a conversation role for each participant of the conversation and metadata describing the conversation such as tonality of words spoken by a participant in a particular conversation role. Outputs from the text mining engine are indexed and useful for various purposes. For instance, because the system can identify which speaker in a customer service call is likely an agent and which speaker is likely a customer, words spoken by the agent can be analyzed for compliance reasons, training agents, providing quality assurance for improving customer service, providing feedback to improve the performance of the text mining engine, etc.
Embodiments disclosed herein relate to systems and methods for providing a smart cache. In embodiments, a variable time to live (TTL) may be calculated and associated with data as it is stored in a cache. The variable TTL may be calculated based upon reputation and/or category information related to the source of the data. The reputation and/or category information may include TTL modifiers for adjusting the TTL for data from a particular data source that is stored in the cache. In further embodiments, a feedback method may be employed to update reputation and/or category information for a particular data source.
H04L 67/5682 - Politiques ou règles de mise à jour, de suppression ou de remplacement des données stockées
G06F 12/0802 - Adressage d’un niveau de mémoire dans lequel l’accès aux données ou aux blocs de données désirés nécessite des moyens d’adressage associatif, p. ex. mémoires cache
G06F 12/0864 - Adressage d’un niveau de mémoire dans lequel l’accès aux données ou aux blocs de données désirés nécessite des moyens d’adressage associatif, p. ex. mémoires cache utilisant des moyens pseudo-associatifs, p. ex. associatifs d’ensemble ou de hachage
G06F 12/0875 - Adressage d’un niveau de mémoire dans lequel l’accès aux données ou aux blocs de données désirés nécessite des moyens d’adressage associatif, p. ex. mémoires cache avec mémoire cache dédiée, p. ex. instruction ou pile
G06F 12/128 - Commande de remplacement utilisant des algorithmes de remplacement adaptée aux systèmes de mémoires cache multidimensionnelles, p. ex. associatives d’ensemble, à plusieurs mémoires cache, multi-ensembles ou multi-niveaux
G06F 16/957 - Optimisation de la navigation, p. ex. mise en cache ou distillation de contenus
Systems and methods are provided for a device to obtain a query, such as from a user. The query is vectorized to obtain a numerical representation of the query and provided to a vector database to find the nearest vectors corresponding to most relevant context, such as for a particular domain or subject matter. The query, query vector, and context vectors, and optionally past query history and past query responses, are provided to an artificial intelligence, such as a large language model (LLM), to receive a response to the query without providing the context to the LLM.
Methods and systems for determining, presenting and analyzing API usage of an application are disclosed herein. Embodiments of an API monitor as presented herein may serve to provide tightly coupled insight into API usage by an application to ascertain and provide knowledge and visibility into API usage by an application associated with the API monitor, including API calls made by both a frontend and a backend of an application.
H04L 67/025 - Protocoles basés sur la technologie du Web, p. ex. protocole de transfert hypertexte [HTTP] pour la commande à distance ou la surveillance à distance des applications
H04L 67/10 - Protocoles dans lesquels une application est distribuée parmi les nœuds du réseau
A protection module operates to analyze threats, at the protocol level (e.g., at the HTML level), by intercepting all requests that a browser engine resident in a computing device sends and receives, and the protection agent completes the requests without the help of the browser engine. And then the protection module analyzes and/or modifies the completed data before the browser engine has access to it, to, for example, display it. After performing all of its processing, removing, and/or adding any code as needed, the protection module provides the HTML content to the browser engine, and the browser engine receives responses from the protection agent as if it was speaking to an actual web server, when in fact, browser engine is speaking to an analysis engine of the protection module.
G06F 21/00 - Dispositions de sécurité pour protéger les calculateurs, leurs composants, les programmes ou les données contre une activité non autorisée
G06F 21/56 - Détection ou gestion de programmes malveillants, p. ex. dispositions anti-virus
79.
Systems and Methods of Predictive Filtering Based on Filter Values
Electronic discovery using predictive filtering is disclosed herein. An example method includes receiving a plurality of documents. A selection of a filter value is received, where the filter value comprises a field value or a set of field values for the plurality of documents. A prediction of responsive phrases, responsive concepts, or other meta-data is generated. The plurality of documents is evaluated based on a new filter value. Then, a prediction of other responsive phrases or other responsive concepts is generated. A predictive value is generated. Filter criteria is generated based on the predictive value for each of the other responsive phrases, the other predicted responsive concepts, or other predictive meta-data. A selection is then received of the filter criteria. A filter is built and applied based on the selection, and documents are generated from at least a sub-portion of the received plurality of documents.
G06F 16/38 - Recherche caractérisée par l’utilisation de métadonnées, p. ex. de métadonnées ne provenant pas du contenu ou de métadonnées générées manuellement
80.
Bi-directional synchronization of content between repositories
Systems, methods and products for synchronization of content and metadata where the content and metadata are shared from a source repository to a target repository. One embodiment of a repository connector system utilizes a monolithic robotic server for scheduled synchronization and a second monolithic manual server for processing manual synchronization requests. A metadata server in the connector system enables sharing and synchronization of mapped metadata between content objects in the source and target repositories. A notification server is provided in the connector system to track notifications of changes to shared content in the target repository, and to replicate these notifications in a local database that is accessible by the synchronization servers to identify changes to the content in the second repository. Each of the servers is coupled to a service registry in the connector system to enable discovery and interaction between the connector system components.
Systems, methods and products for enabling parallelized verification of a forensic copy generated using a non-parallelizable hashing algorithm. Disclosed embodiments generate the forensic copy of a data source using a non-parallelizable algorithm. In addition to generating a hash of the source data, intermediate hash states are stored for successive blocks of data from the data source. During verification of the forensic copy, the intermediate hash states and identifiers of the data blocks are retrieved from a data structure that is saved with the forensic copy. The non-parallelizable algorithm is used to hash each data block using the intermediate hash state preceding the data block as a starting hash state, then the hash of the data block is compared to the intermediate hash state following the data block to verify the data block. If all data blocks are successfully verified, the forensic copy is verified, otherwise verification fails.
H04L 9/06 - Dispositions pour les communications secrètes ou protégéesProtocoles réseaux de sécurité l'appareil de chiffrement utilisant des registres à décalage ou des mémoires pour le codage par blocs, p. ex. système DES
H04L 9/00 - Dispositions pour les communications secrètes ou protégéesProtocoles réseaux de sécurité
82.
DEFINITION AND EXTENSION OF STORIES OF CORE ENTITIES AND CALCULATION OF RISK SCORES THEREOF
Core entities are each defined as a subset of base entities that satisfy one or more core entity connection relationships. Base stories are each defined as a subset of core entities that satisfy one or more story connection relationships. A risk score of each core entity is calculated based on previously calculated risk scores of the base entities. A risk score of each base story is calculated based on the calculated risk score of each core entity of the base story. Selected base stories are extended with external content to generate corresponding extended stories.
G06F 21/57 - Certification ou préservation de plates-formes informatiques fiables, p. ex. démarrages ou arrêts sécurisés, suivis de version, contrôles de logiciel système, mises à jour sécurisées ou évaluation de vulnérabilité
83.
SYSTEM AND METHOD FOR EVENT DRIVEN GENERATION OF CONTENT
Systems and methods for content management that allow external events or data to drive the generation of content are disclosed. Specifically, disclosed embodiments allow events generated from external sources (or data determined from those events, or otherwise determined) to drive the generation of content (or metadata associated with that content) in a content management system.
Examples of the present disclosure describe systems and methods for discrete processor feature behavior collection and analysis. In aspects, a monitoring utility may initialize a set of debugging and/or performance monitoring feature sets for a microprocessor. When the microprocessor receives from software content a set of instructions that involves the loading of a set of modules or code segments, the set of modules or code segments may be evaluated by the monitoring utility. The monitoring utility may generate a process trace of the loaded set of modules or code segments. Based on the process trace output, various execution paths may be reconstructed in real-time. The system and/or API calls made by the microprocessor may then be compared to the process trace output to quickly observe the interaction between the software content and the operating system of the microprocessor.
Embodiments of the present disclosure extract a layout from a digital image of a document, including performing an analysis of image data to identify areas of content based on a plurality of test lines of pixels in multiple directions and storing the identified areas as design elements of an electronic document template.
G06V 30/18 - Extraction d’éléments ou de caractéristiques de l’image
G06V 30/412 - Analyse de mise en page de documents structurés avec des lignes imprimées ou des zones de saisie, p. ex. de formulaires ou de tableaux d’entreprise
G06V 30/416 - Extraction de la structure logique, p. ex. chapitres, sections ou numéros de pageIdentification des éléments de document, p. ex. des auteurs
86.
RULES PROCESSING SYSTEMS AND METHODS WITH JUST-IN-TIME COMPILATION FOR ENDPOINT PROTECTION IN KERNEL MODE
An endpoint protection system implementing a new blocking strategy allows a user to specify an arbitrary number of protection rules through a user interface. In user mode, the protection rules are compiled into a single expression tree, which is then compiled into byte code. In kernel mode, the byte code is dynamically loaded in memory (e.g., kernel space) and the assembler validates the byte code and performs a plurality of security checks, then ultimately assembles the byte code into machine code that is native to the processor. Because complex detection/protection logic is compiled in user mode, the invention allows for highly expressive and powerful protection rules. Further, because complex detection/protection logic is not manually written in kernel mode, but validated then evaluated via simple machine code instructions in the privileged mode, the invention is safer and will not slow down the entire operating system.
Examples of the present disclosure describe systems and methods for providing advanced file modification heuristics. In aspects, software content is selected for monitoring. The monitoring comprises determining when the software content performs file accesses that are followed by read and/or write operations. The read/write operations are analyzed in real-time to determine whether the software content is modifying file content. If the monitoring indicates the software content is modifying accessed files, mathematical calculations are applied to the read-write operations to determine the nature of the modifications. Based on the determined nature of the file modifications, the actions of the software content may be categorized and halted prior to completion; thereby, mitigating malicious cyberattacks and/or unauthorized accesses.
Examples of the present disclosure describe systems and methods of providing real-time scanning of IP addresses. In aspects, input may be received by a real-time IP scanning system. The system may generate one or more work orders based on the input. A scanner associated with the system may access a work order and attempt to communicate with one or more devices identified by the work order. If the attempted communication with a device is successful, a protocol analyzer may be used to provide a predefined payload to the device. If the response from the device matches an expected string, the device may be determined to be a safe and/or legitimate device. If the response from the device does not match an expected string, the device may be determined to be a malicious device.
G06F 21/57 - Certification ou préservation de plates-formes informatiques fiables, p. ex. démarrages ou arrêts sécurisés, suivis de version, contrôles de logiciel système, mises à jour sécurisées ou évaluation de vulnérabilité
Systems, methods, and computer program products for adaptively splitting electronic chats are provided. An e-discovery system comprises a computer processor and a non-transitory, computer-readable medium embodying thereon a set of computer instructions executable by the computer processor. The set of computer instructions includes instructions for: sending a chat query to a remote electronic chat service; receiving an electronic chat responsive to the chat query, the electronic chat embodying a set of electronic chat messages; adaptively splitting the set of electronic chat messages into a set of conversations, each conversation in the set of conversations comprising a subset of electronic chat messages from the set of electronic chat messages; and storing each conversation from the set of conversations as a separate document.
Systems, methods and products for uploading scanned documents for collaboration. A user chooses, prior to uploading a document, whether the user wishes for the document to be converted to a text-searchable PDF and/or processed to recognize objects in the image. When the document is scanned, it is uploaded to the cloud based system with the user-selected options, and the PDF/image is processed. The upload may be a multipart, parallel upload to increase the speed of the upload. When the PDF/image is received at the cloud based system, it is processed according to the user-selected options to generate metadata (text or recognized objects) which is stored with the uploaded document. The PDF/image and metadata are shared with users who can then search the metadata for the PDF/image.
H04L 67/1097 - Protocoles dans lesquels une application est distribuée parmi les nœuds du réseau pour le stockage distribué de données dans des réseaux, p. ex. dispositions de transport pour le système de fichiers réseau [NFS], réseaux de stockage [SAN] ou stockage en réseau [NAS]
91.
Systems and Methods for Document Analysis to Produce, Consume and Analyze Content-By-Example Logs for Documents
Document analysis systems and methods for the generation of a content-by-example log that expresses withheld documents in terms of a set of disclosed documents are disclosed. Additionally, document analysis systems and methods for the analysis of such a content-by-example log to determine withheld documents of interest without access to those withheld documents are disclosed.
Systems and methods for the design, deployment and utilization of targeted multimedia communications based upon audiences are disclosed. More specifically, embodiments may allow the targeting of communications to users in multiple media formats from the same multimedia communication templates and the delivery of such communications to users through multiple communication channels.
Systems and methods for the design, deployment and utilization of targeted multimedia communications based upon audiences are disclosed. More specifically, embodiments may allow the targeting of communications to users in multiple media formats from the same multimedia communication templates and the delivery of such communications to users through multiple communication channels.
H04N 21/45 - Opérations de gestion réalisées par le client pour faciliter la réception de contenu ou l'interaction avec le contenu, ou pour l'administration des données liées à l'utilisateur final ou au dispositif client lui-même, p. ex. apprentissage des préférences d'utilisateurs pour recommander des films ou résolution de conflits d'ordonnancement
94.
Security privilege escalation exploit detection and mitigation
Examples of the present disclosure describe systems and methods for monitoring the security privileges of a process. In aspects, when a process is created, the corresponding process security token and privilege information is detected and recorded. At subsequent “checkpoints,” the security token is evaluated to determine whether the security token has been replaced, or whether new or unexpected privileges have been granted to the created process. When a modification to the security token is determined, a warning or indication of the modification is generated and the process may be terminated to prevent the use of the modified security token.
H04L 9/32 - Dispositions pour les communications secrètes ou protégéesProtocoles réseaux de sécurité comprenant des moyens pour vérifier l'identité ou l'autorisation d'un utilisateur du système
G06F 21/50 - Contrôle des utilisateurs, des programmes ou des dispositifs de préservation de l’intégrité des plates-formes, p. ex. des processeurs, des micrologiciels ou des systèmes d’exploitation
95.
Behavioral threat detection definition and compilation
Examples of the present disclosure describe systems and methods for behavioral threat detection definition compilation. In an example, one or more sets of rule instructions may be packaged for distribution and/or use by a behavioral threat detection engine. As an example, a set of rule instructions is compiled into an intermediate language and assembled in to a compiled behavior rule binary. Event linking is performed, wherein other rules launched by the rule and/or events that launch the rule or are processed by the rule are identified, and such information may be stored accordingly. The behavior rule binary may be packaged with other rules associated with identifying a specific behavior. The packaged behavior rule is distributed to one or more computing devices for use with a behavioral threat detection engine. For example, the threat detection engine may execute the behavior rule using a rule virtual machine.
G06F 9/455 - ÉmulationInterprétationSimulation de logiciel, p. ex. virtualisation ou émulation des moteurs d’exécution d’applications ou de systèmes d’exploitation
96.
System and method for multi-media search in a content management system
A system comprising a client computer, a data store comprising a content management repository, a server computer coupled to the client computer by a network, the server computer comprising code for: receiving audio data; converting the audio data to text; extracting a specified string from the text as an extracted string; determining an extracted string attribute for the extracted string; storing a media file containing the audio data as a content object; configuring the content object to be searchable by the extracted string; receiving a search query from the client application; searching a plurality of managed objects based on the search query; and based on determining that the extracted string matches a search string, returning an indication of the first media file, the extracted string and the extracted string attribute in a search result.
G06F 16/00 - Recherche d’informationsStructures de bases de données à cet effetStructures de systèmes de fichiers à cet effet
G06F 16/61 - IndexationStructures de données à cet effetStructures de stockage
G06F 16/638 - Présentation des résultats des requêtes
G06F 16/683 - Recherche de données caractérisée par l’utilisation de métadonnées, p. ex. de métadonnées ne provenant pas du contenu ou de métadonnées générées manuellement utilisant des métadonnées provenant automatiquement du contenu
97.
System and method for content management with intelligent data store access across distributed stores
A configuration object is provided to configure a server. The configuration object has an associated type to which the configuration object applies and information about a plurality of file stores available to the server. A method for data access can include, receiving, by the server, a request to perform a first operation with respect to a content object associated with the associated type to which the configuration object applies, using the configuration object to determine, from the plurality of file stores available to the server, a set of candidate file stores to service the request, and selecting a target file store from the set of candidate file stores and servicing the request using the target file store. Selecting the target file store includes mapping the object identifier to the target file store.
H04L 67/08 - Protocoles spécialement adaptés à l'émulation du terminal, p. ex. Telnet
H04L 67/1001 - Protocoles dans lesquels une application est distribuée parmi les nœuds du réseau pour accéder à un serveur parmi une pluralité de serveurs répliqués
H04L 67/1097 - Protocoles dans lesquels une application est distribuée parmi les nœuds du réseau pour le stockage distribué de données dans des réseaux, p. ex. dispositions de transport pour le système de fichiers réseau [NFS], réseaux de stockage [SAN] ou stockage en réseau [NAS]
H04L 67/568 - Stockage temporaire des données à un stade intermédiaire, p. ex. par mise en antémémoire
98.
SYSTEMS AND METHODS FOR IDENTITY AND ACCESS MANAGEMENT WITH EXTENDED TRUST
An identity and access management (IAM) extended trust server (ETS) can work with a cloud-based IAM platform to authorize a user in a home zone to access a resource such as an enterprise application in an enterprise computing network. The IAM ETS receives a request from the user to access another resource, determines that other resource resides in a geographical zone that is different from the home zone, checks with the cloud-based IAM platform on whether the user is authorized to access the resource in the geographical zone, and responsive to an indication from the cloud-based IAM platform that the user is authorized to access the resource in the geographical zone, redirects a browser on the user device to the resource in the geographical zone without initiating a new session for the user, thereby providing the user with seamless access across multiple zones in a single global session.
A system and method are provided for synchronizing read-only folders from a cloud-based server. Users can set permissions when sharing folders with other users. The permissions are enforced by client devices of the users downloading content of the folders from the server. A folder at a user's client from the shared domain may include locally modified content and shared content. Based on an indication of a change by a second user to the folder at the server, the user's client modifies a local folder. To prevent local changes made by the user from being overwritten, the user's client identifies the folder containing locally-modified content as a local content folder not to be synchronized between the plurality of clients.
Peer device protection enables a first device comprising a digital security agent to remedy security issues on (or associated with) a set of devices visible to the first device. In aspects, a first device comprising a digital security agent may identify a set of devices visible to the first device. The first device may monitor the set of devices to collect data, such as types of communications and data points of interest. The digital security agent may apply threat detection to the collected data to identify anomalous network behavior. When anomalous network behavior is detected, the first device may cause an indicator of compromise (IOC) to be generated. Based on the IOC, the first device may facilitate remediation of the anomalous network behavior and/or apply security to one or more devices in the set of devices.
