Symantec Corporation

Vmware, Inc.

Symantec Operating Corporation

Adam Schepis

Keith Newstadt

Robert Walters

Andrew Caola

Matt Boucher

Shaun P Cooley

Brian Hernacki

Michael Shavell

William Gauvin

Darrell Kienzle

Andi Abes

Matthew Elder

Joe Kinsella

Javier Santoyo

Vikram Pillai

A computer-implemented method of executing a policy-based operation on a shared computer infrastructure includes storing in a computer memory a dynamically extensible metadata system that is in communication with a processor that executes policy-based operations, where the dynamically extensible metadata system includes a data structure, a collection method, a policy processing method, and a policy condition. The collection method is then executed to collect data from a first computer resource in the shared computer infrastructure using a first data structure and from a second computer resource in the shared computer infrastructure using a second data structure, where the first data structure and the second data structure are different data structures. The collected data is then processed with the policy processing method to determine if the collected data meets the policy condition.

System and method for run-time adaptable policy engine for heterogeneous managed entities

A computer-implemented method for applying parental-approval decisions to user-generated content. The method may include receiving, from a child, a request to upload user-generated content to the Internet. The method may also include providing the user-generated content to a guardian of the child and receiving, from the guardian of the child, a decision indicating whether the user-generated content is allowed to be uploaded to the Internet. The method may further include applying the decision of the guardian to the user-generated content. Various other methods, systems, and computer-readable media are also disclosed.

Systems and methods for applying parental-control approval decisions to user-generated content

A computer-implemented method may intercept a file-system call associated with a media file. The computer-implemented method may determine an attribute of the media file. The computer-implemented method may also identify a parental-control policy associated with the attribute of the media file. The computer-implemented method may further apply the parental-control policy to the media file. Various other methods, systems, and computer-readable media are also disclosed.

Methods and systems for applying parental-control policies to media files

A computer-implemented method may include tracking a child's usage of a computing system. The computer-implemented method may also include generating an event history based on the child's usage of the computing system and identifying a restricted event that violated a parental-control policy. The computer-implemented method may further include creating an event trail by identifying at least one event in the event history that led to the restricted event. Various other methods, systems, and computer-readable media are also disclosed.

Methods and systems for providing context for parental-control-policy violations

Techniques for multimedia metadata security are disclosed. In one particular embodiment, the techniques may be realized as a method for multimedia metadata security comprising receiving an indication that multimedia metadata has been created for a multimedia file, and encrypting, using at least one computer processor, the multimedia metadata stored in a body of the multimedia file.

Techniques for multimedia metadata security

A method and apparatus for controlling audio/video display using a policy is disclosed. In one embodiment, a method for policy-based control of audio/video display including monitoring at least one of at least one audio/video signal input or at least one power outlet using a policy, wherein the policy defines information for controlling audio/video display and in response to a detection of at least one of an audio/video signal or an electrical power, routing the at least one of the audio/video signal or the electrical power according to the policy.

Method and apparatus for controlling audio/video display using a policy

A method may include identifying a computer-usage trend of a first user that reflects a history of computer-related activities engaged in by the first user. The computer usage trend may indicate at least one software program and/or website accessed by the user. The method may also include determining that a current user is logged into a computing system under a user account of the first user. The method may further include tracking activities of the current user while the current user is logged into the computing system as the first user, comparing the tracked activities of the current user with the computer-usage trend of the first user, and determining that the tracked activities of the current user do not correspond to the computer-usage trend of the first user. The method may additionally include, performing at least one remedial action. Various other methods, systems, and computer-readable media are also disclosed.

Systems and methods for performing authentication validation

Outbound network traffic originating from a client computer is monitored, and requests to access URLs in the outbound network traffic are detected. Detected requests to access URLs are compared to each of a plurality of rules, in order to determine whether specific ones of the detected requests were initiated automatically by a process or manually by a human user. Where a rule of the plurality applies to a detected request, a rating concerning the request is adjusted. The rating indicates a likelihood as to whether the request was initiated automatically or manually. Depending upon whether the rating concerning the request reaches a threshold, the request is categorized as being either automatically initiated by a process, or manually initiated by a human user. Only those requests categorized as being manually initiated by a human user are logged.

Real-time identification of URLs accessed by automated processes

A method for managing parental controls may include enabling real-time collaboration between a child and a guardian of the child to manage one or more parental control policies by 1) initiating a collaborative parental-control-management session between the child and the guardian, 2) during the collaborative parental-control-management session, recording actions the child performs on a first computing system, 3) as the child performs the actions, streaming a representation of the actions of the child to a second computing system, 4) using the representation of the actions of the child to enable, at the second computing system, a guardian of the child to view the actions of the child as the actions occur, and 5) during the collaborative parental-control-management session, modifying the one or more parental controls. Various other methods, systems, and computer-readable media are also disclosed.

Systems and methods for managing parental controls

Detection of network devices (e.g., stealth devices) and mapping network topology are performed via network introspection by collaborating endpoints/nodes. The method includes receiving (e.g., by a node on a network) an assignment to be a supernode that will manage multiple agents of a subnetwork within an overall network. This assigned supernode instructs two or more of the agents to perform a set of network traffic fingerprinting tests of the subnetwork by passing information across the subnetwork to each other. The supernode receives results of the tests from the clients and detects one or more intermediate devices located between the clients based on an effect of the intermediate devices on the information passed between the clients. The supernode can further map the topology of the subnetwork (including the detected devices) which can be used in mapping the overall network topology.

Detecting network devices and mapping topology using network introspection by collaborating endpoints

A filtering policy is defined responsive to parental directives. The filtering policy specifies to filter a child's access to content based on fact-based categorization and subjective factors, such as the emotional tone, expressed sentiment, extremity and/or expressed subjectivity. Content is categorized based on the occurrence of predefined words. A sentiment-based analysis of content is also performed. The categorization and/or analysis can occur prior to a child's attempt to download the content, or in real-time in conjunction with a download attempt. Attempts by the child to access content are detected. It is determined whether the filtering policy permits the child to access the content in question, responsive to results of the categorization and sentiment-based analysis of that content. If so, the attempted access is allowed to proceed. If not, the access attempt is blocked.

Using sentiment-based analysis in the filtering of web content

A computer-implemented method may associate a communication-control policy with a contact. The computer-implemented method may identify a first communication made via a first communication mechanism. The computer-implemented method may also identify a first alias associated with the first communication. The computer-implemented method may determine that the first alias is an alias of the contact. The computer-implemented method may apply the communication-control policy to the first communication, wherein the associating, the identifying the first communication, the identifying the first alias, the determining, and the applying may be performed by a communication-control computing system. Various other methods, systems, and computer-readable media are also disclosed.

Methods and systems for controlling communications

A method and apparatus for monitoring text-based communications to secure a computer is described. In one embodiment, the method for monitoring text-based communications to secure a computer includes defining at least one portion of the computer display that is associated with text-based communications and examining the at least one portion of the computer display to identify textual data within the text-based communications.

Method and apparatus for monitoring text-based communications to secure a computer

A computer-implemented method for rating a current instance of data is described. An activity occurring on a computing system is monitored. The activity includes the current instance of data. A rating is assigned to the current instance of data. A determination is made as to whether the activity includes at least one additional instance of data. When the activity includes at least one additional instance of data, the rating assigned to the current instance of data is updated. The updated rating is based on the content of the at least one additional instance of data.

Systems and methods for rating a current instance of data based on preceding and succeeding instances of data

A computer-implemented method for aiding parental-control-policy decisions may include identifying a computer resource. The computer resource may include any content subject to a parental-control-policy decision. The method may also include identifying a community usage repository. The community usage repository may include information relating to a plurality of children's usage of the computer resource. The method may further include analyzing the community usage repository to generate statistical data relating to the computer resource. The method may additionally include presenting the statistical data to a user. Various other methods, systems, and computer-readable media are also disclosed.

Growing community of inventors

Milford, MA, United States of America

Adam Schepis