Abstract: Methods, apparatus, systems and articles of manufacture are disclosed for generic process chain entity mapping. An example apparatus includes at least one memory, instructions in the apparatus, and processor circuitry to execute the instructions to receive process chain input data, the input data including a system path, identify a match between a path alias and the input data, wherein the path alias includes an alias for one or more system path format patterns, extract at least one of (1) metadata information or (2) command line parameter information from the match, and output transformed data based on the at least one of the extracted metadata information or command line parameter information, the transformed data output in a generalized format.

Abstract: Aspects of the disclosure provide various methods relating to enclaves. For instance, a method of authentication for an enclave entity with a second entity may include receiving, by one or more processors of a host computing device of the enclave entity, a request and an assertion of identity for the second entity, the assertion including identity information for the second identity; using an assertion verifier of the enclave entity to determine whether the assertion is valid; when the assertion is valid, extracting the identity information; authenticating the second entity using an access control list for the enclave entity to determine whether the identity information meets expectations of the access control list; when the identity information meets the expectations of the access control list, completing the request.

Abstract: A method for local data storage governance may include: authenticating, by a privacy service computer program, a user accessing the privacy service using a privacy application; receiving, by the privacy service computer program and from a proxy service, user activity data; saving, by the privacy service computer program, the user activity data to a privacy database; receiving, by the privacy service computer program and from the privacy application, a request for the user activity data; retrieving, by the privacy service computer program and from the privacy database, the user activity data; communicating, by the privacy service computer program, the user activity data to the privacy application, wherein the privacy application stores the user activity data in local storage; receiving, by the privacy service computer program, an acknowledgement of the user activity data; and purging, by the privacy service computer program, the user activity data from the privacy database.

Abstract: In an authentication device, a controller executes login when a user name and a password are entered through an operation device and the entered password is identical to one of a plurality of fixed passwords previously stored in association with the entered user name on an HDD. When the entered password is identical to none of the plurality of fixed passwords and any one of the plurality of fixed passwords satisfies a predetermined condition on similarity to the entered password, the controller inhibits an authentication based on the fixed password satisfying the predetermined condition from being made for a predetermined period.

Abstract: An electronic locking device includes an electronically controllable locking mechanism, a memory, a wireless transceiver configured to communicate wirelessly with a user device to receive an encrypted package containing a biometric template corresponding to an authorized user, and a processor. The processor is configured to decrypt the encrypted package and store the biometric template in the memory, receive a biometric input corresponding to a user attempting to access the electronic locking device, determine if the biometric input matches the biometric template of the authorized user, and activate the electronically controllable locking mechanism in response to a determination that the biometric input matches the biometric template of the authorized user.

Abstract: Disclosed herein are display techniques that will allow sensitive data displayed on a computer screen to only be viewed by authorized users and will render computer screen unreadable to unauthorized users. One or more display techniques are capable of automatically scrambling and unscrambling display screen of the computing device in which only an intended viewer is able to view data on the display screen using deciphering glasses.

Abstract: An apparatus and method are provided for monitoring a behavior of a communication device by using network controllers and network manager. The communication device is included in a network comprising a set of communication devices and a network manager allowing access by the communication devices to a communication network. A communication device may send a broadcast message to available network controllers and a network manager. The communication device may also send a service request to the network manager, the service request being routed by the network manager to a communication network and sent in broadcast by the network manager to the network controllers. Using the service request as the basis for a first report on behavior of the communication device, the communication device may additionally verify the first report by a report by network controllers based on the service request received from network manager.

Abstract: A device and method manage digital data. The device and method may receive a trusted-phrase text string at a client device. The device and method may receive an application pin number (APN) associated with a user. The device and method may process the APN to determine a selector value. The device and method may extract a portion of the trusted-phrase text string based on the selector value to yield a sub-trusted-phrase text string, generating a storage access ID (SAID), the SAID including the APN and the sub-trusted-phrase-text string encrypted using the trusted-phrase text string as an encryption phrase; and, outputting the SAID to an external device, for creation of a data storage location at a storage server, the data storage location having a name based on the SAID. The device and method may include ability to recover the trusted-phrase text string.

Abstract: A method for building a robust classifier against evasion attacks includes receiving an application, identifying one or more features of the application, and determining a first confidence score for a first version of the application including a first set of features and determining a second confidence score for a second version of the application including a second set of features, the first set of features is different than the second set of features. The method also includes determining a difference between the first confidence score and the second confidence score, and comparing the difference with a convergence threshold. The method includes, based on the comparison, determining whether the first confidence score exceeds a confidence score threshold, and generating a report based on determining the first confidence score exceeds the confidence score threshold.

Abstract: Methods and systems disclosed provide for creating private networks for secured communication between devices. The devices can communicate with each other over a secure tunnel created for a closed circle of devices. Furthermore, the methods and systems can enable offline communication between devices on a private network.

Abstract: Provided herein are systems and methods for global data objects on a data platform where the global data objects are accessible at an organization level. In particular, an organization-level global data object provided by various embodiments can be used as a generic organization object that is owned by a specific organization, and can be managed (e.g., created, deleted, or modified) by use of a leader-based model.

Abstract: Methods and apparatuses for prioritizing transactions are disclosed. An example method of an application performance monitor (APM) comprises intercepting a first packet being transmitted in a network that is monitored by the APM; determining that the first packet is associated with a transaction of the web application that is to be provided with an alternate level of service; modifying a field in the first packet to include metadata interpretable by at least one network device in the network to cause the at least one network device to provide the alternate level of service; and injecting the first packet into the network. The APM may cause network devices to prioritize a specific transaction of an application based on importance.

Abstract: Aspects of the disclosure relate to predicting the spread of malicious software. The computing platform may identify malicious software at a computing device and may input characteristics of the malicious software into a machine learning model to produce time horizons for the malicious software. The computing platform may identify, using a knowledge graph and based on the time horizons, subsets of computing devices, each corresponding to a particular time horizon. The computing platform may perform, at a time within a first time horizon, a first security action for a first subset of computing devices within the first time horizon and a second security action for a second subset of computing devices located within a second time horizon, where the first time horizon and the second time horizon indicate that the first subset will be affected by the malicious software prior to the second subset.

Abstract: The resolving of a decentralized identifier to a corresponding data structure using multiple resolvers. This allows for the use of a consensus of resolvers to improve trust in the resolution process. In order to resolve, a decentralized identifier is sent to multiple resolvers. In response, each of at least some of those resolvers will return a data structure of a particular type (e.g., a decentralized identifier document) that is associated with the decentralized identifier. Then, it is determined whether the data structure for at least some number of resolvers matches each other. That is, it is determined whether at least some predetermined threshold of resolvers is returning the same data structure (e.g., the same decentralized identifier document). If so, then it is determined that the matching data structure is indeed associated with the decentralized identifier. Otherwise, the resolution process has failed.

Abstract: An information processing apparatus includes: a processor configured to: when detecting an unauthorized access to a file or a directory, set a range including at least the specific file or directory subjected to the unauthorized access as a recording range in which access logs are recorded; and after setting the recording range, update or maintain the recording range according to at least a load on a resource used to record the access logs.

Abstract: Techniques for fingerprinting and aggregating a virtual private cloud (VPC) flow log stream are provided. Each VPC flow log event in the VPC flow log is first determined to be a request event or a response event. A fingerprint is then generated for each VPC flow log event. The fingerprint for a VPC flow log event is generated based on the determination whether the VPC flow log event is a request event or a response event and by concatenating and encoding data contained in a set of data fields corresponding to the VPC flow log event. Based on the fingerprint generated for each VPC flow log event, related events can be detected and aggregated to form an aggregated event. Information stored with each aggregated event can then be used to better monitor the VPC.

Abstract: Systems and methods for authenticating an electronic transaction using a hosted authentication service. The systems and methods determine whether an authentication is required based on a first electronic message received from a first data system. Upon determining the authentication is required, the systems and methods transmit a dummy authentication request and a hosted authentication service uniform resource locator to the first data system. The systems and methods further determine or receive an indication whether a user authentication challenge is required based on a transaction risk analysis by a second data system. Upon determining the user authentication challenge is required, the systems and methods provide, at a user interface, an electronic form including a challenge request. The systems and methods transmit, to the first data system, another electronic form including a dummy authentication response generated based on a challenge result.

Abstract: A method (400) for a website authentication is provided. The method includes receiving a reference uniform resource locator (URL) (130) at a browser (120) and determining whether the reference URL adheres to an authentication protocol (202) including a credential identifier (132c) and a web authentication host URL (132a). When the reference URL adheres to the authentication protocol, the method also includes extracting the credential identifier and the web authentication host URL from the reference URL. The method further includes obtaining credential data (160) from a remote service (150) using the credential identifier and sending web authentication instructions (170) to the browser. The web authentication instructions include the web authentication host URL and the credential data.

Abstract: Various embodiments of the present disclosure provide techniques for facilitating a credential-less exchange over a network using a plurality of identifier mapping and member interfaces. The techniques may include initiating the presentation of an enrollment user interface via a client device of a user and receiving selection data indicative of a selection of a service provider instrument from the enrollment user interface. The techniques include generating a matching code for authenticating the user, providing the matching code to a service provider platform, and receiving the matching code from a partner platform. In response to an authentication of the user based on the matching code, the techniques may include generating an UUEK for the user that may be used to replace persistent credentials.

Abstract: Systems and methods are provided for establishing personal connections between blinded secure non-random interested users. In an embodiment, at least one processor may be configured to execute instructions to perform operations comprising: receiving a first input from a first user comprising first identification parameters associated with a second user; receiving a second input from the second user comprising second identification parameters associated with the first user; determining a match based on the first and second inputs; and based on the determined match, notifying at least one of the first or second users of the determined match.