An endpoint in an enterprise network is monitored, and when a potential trigger for a
distributed denial of service (DDoS) attack is followed by an increase in network traffic from …

Abstract Systems and methods are disclosed herein for opening local applications from
browsers. A request to open a document associated with a cloud computing system is …

Disclosed herein are cloud-based machine learning systems and methods for monitoring
networked devices to identify and classify characteristics, to infer typical or atypical behavior …

Primary Examiner-Kaveh Abrishamkar (57) ABSTRACT This document generally relates to
systems, method, and other techniques for identifying and interfering with the operation of …

In the context of network activity by an endpoint in an enterprise network, malware detection
is improved by using a combination of reputation information for a network address that is …

A computer-implemented method for identifying abnormal computer behavior includes
receiving, at a computer server subsystem, data that characterizes subsets of particular …

(57) ABSTRACT A computer-implemented method for securing a content server system is
disclosed. The method includes identifying that a request has been made by a client …

A computer-implemented method for identifying abnormal computer behavior includes
receiving, at a computer server subsystem, data that characterizes subsets of particular …

Provided are computer-implemented methods and systems used in assuring a person's
identity that include the steps of receiving from the person one or more identifying …

An enterprise security system is improved by instrumenting endpoints to explicitly label
network flows according to sources of network traffic. When a network message from an …