Abstract: A system for corporate plan determination and validation employing an advanced decision platform comprises a data retrieval module configured to retrieve cooperative venture related data such as financial, operations and historical data related to the current cooperative plan. A predictive analytics module performs predictive risk functions on venture related data. A predictive simulation module performs predictive simulation functions on risk, operations, and financial data. An interactive display module displays the results of predictive analytics and predictive simulation according to pre-designated specifications of the analysts.

Abstract: A system and method for predictive load balancing for digital multiplayer gaming or simulated environments. The system includes an environment monitor subsystem that monitors a simulation or game condition and system load condition on a computational node of a networked computer environment over time, the game condition comprising a condition within a computer game operating on the computational node and across system nodes. The system also includes an automated planning service subsystem that performs a predictive analysis resulting in a system load forecast for the computational node and changes the system load on the computational node based on the system load forecast by changing a game control and adds or removes nodes, the game control comprising a limitation on the operation of the computer game operating on the computational node or the relationship between nodes or the number of nodes.

Abstract: A system and method for fingerprint-based network mapping of cyber-physical assets, including a distributed operating system, parameter evaluation engine, at least one cyber-physical asset, at least one crypt-ledger, a network, and a scanner that retrieves stored fingerprint records and performs scans of cyber-physical assets to compare against corresponding fingerprints and update a cyber-physical graph based on the success or failure of fingerprint matching.

Abstract: A system and method for self-adjusting cybersecurity analysis and score generation, wherein a reconnaissance engine gathers data about a client's computer network from the client, from devices and systems on the client's network, and from the Internet regarding various aspects of cybersecurity. Each of these aspects is evaluated independently, weighted, and cross-referenced to generate a cybersecurity score by aggregating individual vulnerability and risk factors together to provide a comprehensive characterization of cybersecurity risk using a transparent and traceable methodology. The scoring system itself can be used as a state machine with the cybersecurity score acting as a feedback mechanism, in which a cybersecurity score can be set at a level appropriate for a given organization, and data from clients or groups of clients with more extensive reporting can be used to supplement data for clients or groups of clients with less extensive reporting to enhance cybersecurity analysis and scoring.

Abstract: A system and method for self-adjusting cybersecurity analysis and score generation, wherein a reconnaissance engine gathers data about a client's computer network from the client, from devices and systems on the client's network, and from the Internet regarding various aspects of cybersecurity. Each of these aspects is evaluated independently, weighted, and cross-referenced to generate a cybersecurity score by aggregating individual vulnerability and risk factors together to provide a comprehensive characterization of cybersecurity risk using a transparent and traceable methodology. The scoring system itself can be used as a state machine with the cybersecurity score acting as a feedback mechanism, in which a cybersecurity score can be set at a level appropriate for a given organization, and data from clients or groups of clients with more extensive reporting can be used to supplement data for clients or groups of clients with less extensive reporting to enhance cybersecurity analysis and scoring.

Abstract: A system for automatically creating and merging ontological databases from heterogeneous data sets and for conducting context-based searches, inference, and deduction using those databases. The system has an automated ontology engine which receives data, analyzes it to identify implicit relationships in between its elements, and organizes it into ontologies. The automated index generator creates a searchable index of the created ontologies and instances. The semantic search engine performs context-based searches, inference and deduction based on the index of ontologies and contextual information about the search query and the user or models relating to the constructed knowledge base comprising new relationships not in the original data.

Abstract: A system for web-rendering data-dense geographical regions that correspond to heterogenous sourced data and formats for highly scalable parallel simulations, comprising a multi-dimensional time-series database enabling single-query support over all simulations via individual simulation swimlanes.

Abstract: A system for programmatic and user interactive inclusion of time-series geospatial markers in analyses employing a cyber-decision platform has been developed comprising a module to retrieve an indexed geospatial image tiles and map overlay data corresponding to tiles. The system may attach a unique geo-hash label to each point of an indexed geospatial image tile based upon the point's geographical coordinates such that points in close proximity will have similar geo-hash values. A web application interface allows users to interactively retrieve and visualize indexed geospatial image tiles, add map overlays and create geo-hashes as desired.

Abstract: A system and methods for mitigating Kerberos ticket attacks within a domain is provided, comprising an authentication object inspector configured to observe a new authentication object generated by an identity provider, and retrieve the new authentication object; and a hashing engine configured to retrieve the new authentication object from the authentication object inspector, calculate a cryptographic hash for the new authentication object, and store the cryptographic hash for the new authentication object in a data store; wherein subsequent access requests accompanied by authentication objects are validated by comparing hashes for each authentication object to previous generated hashes.

Abstract: A system and method for cybersecurity reconnaissance, analysis, and scoring that uses distributed, cloud-based computing services to provide sufficient scalability for analysis of enterprise IT networks using only publicly available characterizations. The system and method comprise an in-memory associative array which manages a queue of vulnerability search tasks through a public-facing proxy network. The public-facing proxy network has search nodes configurable to present the network to search tools in a desired manner to control certain aspects of the search to obtain the desired results. A distributed data processing engine and cloud-based storage are used to provide scalable computing power and storage. A data packet modifier is used to reveal the IP address of a threat actor behind a port scan and subsequently block the threat actor. Each of the cloud-based computing services is containerized and orchestrated for management and efficient scaling purposes.

Abstract: A system for improving a distributable model with distributed data is provided, comprising a network-connected distributable model source configured to serve instances of a distributable model; and a directed computation graph module configured to receive at least an instance of the distributable model from the network-connected computing system, create a cleansed dataset from data stored in the memory with at least biases within the data stored in memory corrected, train the instance of the distributable model with the cleansed dataset, and generate an update report based at least in part by updates to the instance of the distributable model.

Abstract: A system for risk-based multi-factor authentication having a multi-dimensional time series data server configured to monitor and record a network's traffic data and to serve the traffic data to other modules and a directed computation graph module configured to receive network traffic data from the multi-dimensional time series data server, determine a network traffic baseline from the network traffic data, and determine a verification score needed before granting access based at least in part by the network traffic baseline. A plurality of verification methods build up a user's verification score to required level to gain access.

Abstract: A system for detecting and mitigating attacks using forged authentication objects within a domain is provided, comprising an authentication object inspector configured to observe a new authentication object generated by an identity provider, and retrieve the new authentication object; and a hashing engine configured to retrieve the new authentication object from the authentication object inspector, calculate a cryptographic hash for the new authentication object, and store the cryptographic hash for the new authentication object in a data store; wherein subsequent access requests accompanied by authentication objects are validated by comparing hashes for each authentication object to previous generated hashes.

Abstract: A system and method for cybersecurity reconnaissance, analysis, and scoring that uses distributed, cloud-based computing services to provide sufficient scalability for analysis of enterprise IT networks using only publicly available characterizations. The system and method comprise an in-memory associative array which manages a queue of vulnerability search tasks through a public-facing proxy network. The public-facing proxy network has search nodes configurable to present the network to search tools in a desired manner to control certain aspects of the search to obtain the desired results. A distributed data processing engine and cloud-based storage are used to provide scalable computing power and storage. Each of the cloud-based computing services is containerized and orchestrated for management and efficient scaling purposes.

Abstract: There is provided a valve assembly, the valve assembly including a body (8) in which there is housed at least one valve ball (22, 24), a movement assembly (32, 34) for moving the ball between closed and open positions with respect to a channel which passes through the body. At respective ends of the valve body there is provided sealing means (38) including a valve seat, biasing means to bias the valve seat towards contact with the ball, and at least one annular member engaged with the valve body to retain the valve seat, biasing means and at least one ball in the valve body and form a modular unit. Positioned in the valve body outwardly of each of the sealing means, there is provided a fitting means (50) engaged with the valve body and the form of the fitting means is selected and fitted to the modular unit independently of the said at least one annular member.

Abstract: There is provided a valve assembly, the valve assembly including a body (8) in which there is housed at least one valve ball (22, 24), a movement assembly (32, 34) for moving the ball between closed and open positions with respect to a channel which passes through the body. At respective ends of the valve body there is provided sealing means (38) including a valve seat, biasing means to bias the valve seat towards contact with the ball, and at least one annular member engaged with the valve body to retain the valve seat, biasing means and at least one ball in the valve body and form a modular unit. Positioned in the valve body outwardly of each of the sealing means, there is provided a fitting means (50) engaged with the valve body and the form of the fitting means is selected and fitted to the modular unit independently of the said at least one annular member.

Abstract: A closed loop coolant system which ensures the isolation of coolant fluid within an apparatus for producing a metal container by wall ironing. The apparatus includes a die toolpack which reduces the thickness of the container side wall, a ram (5) and a ram guidance assembly (10) which guides the ram along a bore of a tubular assembly. The tubular assembly has a fluid inlet, and the surface of the bore of the tubular assembly has grooves (13) for passage of coolant fluid between the bore and around the outside of the ram (5) and seals for minimizing leakage of oil into the coolant. Coolant is directed back to a tank (20) via a heat exchanger (21) and any oil is skimmer off the coolant by an oil skimmer (24). This oil can then be filtered, cleaned and recycled, or disposed of.

Abstract: A closed loop coolant system which ensures the isolation of coolant fluid within an apparatus for producing a metal container by wall ironing. The apparatus includes a die toolpack which reduces the thickness of the container side wall, a ram 5 and a ram guidance assembly 10 which guides the ram along a bore of a tubular assembly. The tubular assembly has a fluid inlet, and the surface of the bore of the tubular assembly has grooves 13 for passage of coolant fluid between the bore and around the outside of the ram 5 and seals for minimising leakage of oil into the coolant. Coolant is directed back to a tank 20 via a heat exchanger 21 and any oil is skimmer off the coolant by an oil skimmer 24. This oil can then be filtered, cleaned and recycled, or disposed of.

Abstract: A storage stable adhesive paste composition is described. It contains a plurality of first solid particles comprising a surface protected polyisocyanate and a plurality of second solid particles of polymer having functional groups that react with the polyisocyanate. The particles may be protected by encapsulation in a layer of a material that is not reactive to the polyisocyanate. Preferably, the protective layer also is not reactive to the polymer having functional groups that react with the polyisocyanate. The polyisocyanate particles also can be protected by a layer formed by chemically reacting said polyisocyanate particles with isocyanate reactive compounds to form a protective surface layer around said polyisocyanate particles.

Abstract: A storage stable adhesive paste composition is described. It contains a plurality of first solid particles comprising a surface protected polyisocyanate and a plurality of second solid particles of polymer having functional groups that react with the polyisocyanate. The particles may be protected by encapsulation in a layer of a material that is not reactive to the polyisocyanate. Preferably, the protective layer also is not reactive to the polymer having functional groups that react with the polyisocyanate. The polyisocyanate particles also can be protected by a layer formed by chemically reacting said polyisocyanate particles with isocyanate reactive compounds to form a protective surface layer around said polyisocyanate particles.