Abstract: A system and method for guiding privacy-enhancing transformations are described. The system and method include a recommendation engine configured to identify sets of transformations to mitigate a privacy risk below a user specified threshold specified in-terms of privacy-risk score for a given input dataset while keeping the utility of the dataset above the user-specified utility threshold specified in-terms of utility score. A simulation engine configured to simulate the identified set of transformations from the recommendation engine on the dataset to determine the optimal application of the plurality of transformations for maximizing the utility of the dataset, and output device to provide the optimized dataset with the privacy risk score and utility score.

Abstract: A system and method for providing the ability to use k-anonymous groups to analyze disparate data sets via the use of either individual to segment or segment to segment matching using modelling or querying approaches are disclosed. The system and method include creating a common representation across all consumer and producer data sets, training one or more models or defining one or more queries optimized to recognize the behavior of the specified subjects within the generated common representation, evaluating those models or executing those queries on the common representation of the producer data set(s) to identify likely candidates for the specified input data subjects in each producer data set, the performing of actions over the identified subjects for each producer data set, and output the analytics result.

Abstract: A novel system and a new data communication method are invented in a software-defined (SDN) network to provide delivery of certain types of critical data flows with certain QoS and/or extra security requirements in a congested network. The method of invention allows such critical data not to traverse the data plane, as it normally would, but instead to go from the ingress switch directly to the egress switch, thereby always in two hops using the control channels. By shortcutting all other switches along the traditional data path computed by normal routing, it potentially provides guaranteed throughput, lower latency/jitter or higher level of security.

Abstract: A novel system and a new data communication method are invented in a software-defined (SDN) network to provide delivery of certain types of critical data flows with certain QoS and/or extra security requirements in a congested network. The method of invention allows such critical data not to traverse the data plane, as it normally would, but instead to go from the ingress switch directly to the egress switch, thereby always in two hops using the control channels. By shortcutting all other switches along the traditional data path computed by normal routing, it potentially provides guaranteed throughput, lower latency/jitter or higher level of security.