1. A method to enforce same origin policy comprising:
examining a network message, from a client to a first domain, corresponding to a sensitive data, wherein generation of the network message is initiated from a second domain;
determining a trigger within the network message to cause release of the sensitive data, wherein the trigger identifies the second domain;
retrieving one or more authorized triggers for the sensitive data from a storage device;
determining whether the trigger matches the one or more authorized triggers for the sensitive data; and
releasing the sensitive data based on the determination of whether the trigger matches the one or more authorized triggers for the sensitive data.
2. The method of 1 further comprising determining whether the trigger is from the same origin as a destination of the trigger.
3. The method of 1 wherein the sensitive data is one of: HTTP cookie, session cookie, session data, authentication information, password, credential, financial data, or personal information.
4. The method of 1 wherein the trigger is one or more of: REFERER HTTP Header, ORIGIN HTTP Header, URL location, X-Requested-With HTTP Header, or X-Requested-By HTTP Header.
5. The method of 4 further comprising extracting a domain name from the REFERER HTTP Header.
6. The method of claim 1 further comprising storing one or more instructions in memory that when executed by a processor cause the processor to perform the examining, determining the trigger, retrieving the one or more authorized triggers, determining whether the trigger matches, or releasing.
7. The method of 1 wherein the network message is an Hypertext Transfer Protocol (HTTP) request.
8. A method of enforcing same origin policy comprising:
examining a HyperText Transfer Protocol (HTTP) response from a client to a first domain, wherein generation of the HTTP response is initiated from a second domain;
determining a sensitive data from the HTTP response;
determining meta-data for the sensitive data, wherein the meta-data identifies the second domain;
constructing an acting sensitive data based on the determined meta-data for the sensitive data; and
inserting the acting sensitive data into the HTTP response.
9. The method of 8 wherein the sensitive data is an HTTP cookie.
10. The method of 8 wherein the sensitive data is a session cookie.
11. The method of claim 8 further comprising storing one or more instructions in memory that when executed by a processor cause the processor to perform the examining, determining the sensitive data, determining the meta-data, constructing, or inserting.
12. The method of 8 wherein determining the meta-data for the sensitive data comprises examining a communication channel for an origin identifier.
13. The method of 8 wherein the trigger is one or more of: REFERER HTTP Header, ORIGIN HTTP Header, URL location, X-Requested-With HTTP Header, or X-Requested-By HTTP Header.
14. A security agent system to enforce same origin policy for a sensitive data comprising:
a storage device storing one or more instructions; and
a processor coupled to the storage device configured to execute the one or more instructions, wherein the one or more instructions are configured to cause the processor to:
examine a network message, from a client to a first domain, corresponding to a sensitive data;
determine a trigger within the network message to cause release of the sensitive data, wherein the trigger identifies a second domain;
retrieve one or more authorized triggers for the sensitive data;
determine whether the trigger matches the one or more authorized triggers for the sensitive data; and
release the sensitive data based on the determination of whether the trigger matches the one or more authorized triggers for the sensitive data.
15. The system of claim 14 wherein the processor is to comprise one or more processor cores.
16. The system of claim 14 wherein the storage device is to comprise volatile or non-volatile memory.
17. The system of claim 14 wherein the processor is to determine whether a destination of sensitive data is an authorized destination.
18. The system of claim 14 wherein the sensitive data is one of: HTTP cookie, session cookie, session data, or authorization information.
19. The system of claim 14 wherein the network message is communicated over a secure communication channel.
20. The system of claim 14, wherein the secure communication channel is SSL or TLS.
The claims below are in addition to those above.
All refrences to claim(s) which appear below refer to the numbering after this setence.
1. A system comprising:
a processor and a non-transitory memory comprising program logic, the program logic comprising:
a document search unit that is configured to:
generate a network model that comprises a plurality of events;
wherein each event comprises a plurality of sub-events, and each sub-event corresponds to a state from a plurality of states;
receive a plurality of event-and-time-specific texts that are contextually related to a particular event; and
process the plurality of event-and-time-specific texts by applying the network model to the plurality of event-and-time-specific texts to identify, within the plurality of event-and-time specific texts, a particular set of texts that belong to a particular state, of the plurality of states, of a particular sub-event; and
a summarizing unit that is configured to:
identify, within the particular set of texts, one or more texts that are representative of a plurality of texts in the particular set of texts that belong to the particular state and that describe information related to the particular sub-event.
2. The system of claim 1, wherein the one or more texts that are most representative are selected as those that the most representatively describe the particular event and the particular state of the particular event.
3. The system of claim 1, wherein the summarizing unit that is configured to:
initialize one or more elements of the network model;
identify a plurality of state-and-event-specific words for the particular event in contents of the plurality of event-and-time-specific texts; and
generate a modified network model based on the plurality of state-and-event-specific words and the plurality of event-and-time-specific texts.
4. The system of claim 3, wherein the summarizing unit that is configured to:
determine unknown parameters of the modified network model using a Baum-Welch algorithm;
wherein the Baum-Welch algorithm computes maximum likelihood estimates and posterior mode estimates for the unknown parameters of the modified network model using training data.
5. The system of claim 1, wherein the summarizing unit that is configured to:
divide the plurality of event-and-time-specific texts into segments based on a state associated with a particular event-and-time-specific text and a time associated with a particular event-and-time-specific text;
wherein the dividing of the plurality of event-and-time-specific texts into segments is performed by applying a Viterbi algorithm.
6. The system of claim 1, wherein the summarizing unit that is configured to:
determine the particular set of texts, from the plurality of event-and-time specific texts, comprises eliminating spam texts, texts that contain less than a minimum threshold of words, texts that contain more than a maximum threshold of words, and texts that do not meet a word repetition requirement.
7. The system of claim 3,
wherein the plurality of event-and-time-specific texts comprises texts provided by social media search and tracking sites, including social media services;
wherein the plurality of event-and-time-specific texts comprises texts generated by users;
wherein the plurality of event-and-time-specific texts relate to sport events, concerts, political events, social events, or celebrity personalities.
8. A method comprising:
generating a network model that comprises a plurality of events;
wherein each event comprises a plurality of sub-events, and each sub-event corresponds to a state from a plurality of states;
receiving a plurality of event-and-time-specific texts that are contextually related to a particular event;
processing the plurality of event-and-time-specific texts by applying the network model to the plurality of event-and-time-specific texts to identify, within the plurality of event-and-time specific texts, a particular set of texts that belong to a particular state, of the plurality of states, of a particular sub-event; and
identifying, within the particular set of texts, one or more texts that are representative of a plurality of texts in the particular set of texts that belong to the particular state and that describe information related to the particular sub-event; and
wherein the method is performed by one or more computing devices.
9. The method of claim 8, wherein the one or more texts that are most representative are selected as those that the most representatively describe the particular event and the particular state of the particular event.
10. The method of claim 8, further comprising:
initializing one or more elements of the network model;
identifying a plurality of state-and-event-specific words for the particular event in contents of the plurality of event-and-time-specific texts; and
generating a modified network model based on the plurality of state-and-event-specific words and the plurality of event-and-time-specific texts.
11. The method of claim 10, further comprising:
determining unknown parameters of the modified network model using a Baum-Welch algorithm;
wherein the Baum-Welch algorithm computes maximum likelihood estimates and posterior mode estimates for the unknown parameters of the modified network model using training data.
12. The method of claim 8, further comprising:
dividing the plurality of event-and-time-specific texts into segments based on a state associated with a particular event-and-time-specific text and a time associated with a particular event-and-time-specific text;
wherein the dividing of the plurality of event-and-time-specific texts into segments is performed by applying a Viterbi algorithm.
13. The method of claim 8, further comprising:
determining the particular set of texts, from the plurality of event-and-time specific texts, comprises eliminating spam texts, texts that contain less than a minimum threshold of words, texts that contain more than a maximum threshold of words, or texts that do not meet a word repetition requirement.
14. The method of claim 10,
wherein the plurality of event-and-time-specific texts comprises texts provided by social media search and tracking sites, including social media services;
wherein the plurality of event-and-time-specific texts comprises texts generated by users;
wherein the plurality of event-and-time-specific texts relate to sport events, concerts, political events, social events, or celebrity personalities.
15. A non-transitory computer-readable storage medium storing one or more instructions which, when executed by one or more processors, cause the one or more processors to perform steps of:
generating a network model that comprises a plurality of events;
wherein each event comprises a plurality of sub-events, and each sub-event corresponds to a state from a plurality of states;
receiving a plurality of event-and-time-specific texts that are contextually related to a particular event;
processing the plurality of event-and-time-specific texts by applying the network model to the plurality of event-and-time-specific texts to identify, within the plurality of event-and-time specific texts, a particular set of texts that belong to a particular state, of the plurality of states, of a particular sub-event; and
identifying, within the particular set of texts, one or more texts that are representative of a plurality of texts in the particular set of texts that belong to the particular state and that describe information related to the particular sub-event.
16. The non-transitory computer-readable storage medium of claim 15, wherein the one or more texts that are most representative are selected as those that the most representatively describe the particular event and the particular state of the particular event.
17. The non-transitory computer-readable storage medium of claim 15, storing additional instructions which, when executed by the one or more processors, cause the one or more processors to perform steps of:
initializing one or more elements of the network model;
identifying a plurality of state-and-event-specific words for the particular event in contents of the plurality of event-and-time-specific texts; and
generating a modified network model based on the plurality of state-and-event-specific words and the plurality of event-and-time-specific texts.
18. The non-transitory computer-readable storage medium of claim 17, storing additional instructions which, when executed by the one or more processors, cause the one or more processors to perform steps of:
determining unknown parameters of the modified network model using a Baum-Welch algorithm;
wherein the Baum-Welch algorithm computes maximum likelihood estimates and posterior mode estimates for the unknown parameters of the modified network model using training data.
19. The non-transitory computer-readable storage medium of claim 15, storing additional instructions which, when executed by the one or more processors, cause the one or more processors to perform steps of:
dividing the plurality of event-and-time-specific texts into segments based on a state associated with a particular event-and-time-specific text and a time associated with a particular event-and-time-specific text;
wherein the dividing of the plurality of event-and-time-specific texts into segments is performed by applying a Viterbi algorithm.
20. The non-transitory computer-readable storage medium of claim 15, storing additional instructions which, when executed by the one or more processors, cause the one or more processors to perform steps of:
determining the particular set of texts, from the plurality of event-and-time specific texts, comprises eliminating spam texts, texts that contain less than a minimum threshold of words, texts that contain more than a maximum threshold of words, or texts that do not meet a word repetition requirement.