Abstract: A computer-implemented method for implementing alert interpretation in enterprise security systems is presented. The computer-implemented method includes employing a plurality of sensors to monitor streaming data from a plurality of computing devices, generating alerts based on the monitored streaming data, automatically analyzing the alerts, in real-time, by using a graph-based alert interpretation engine employing process-star graph models, retrieving a cause of the alerts, an aftermath of the alerts, and baselines for the alert interpretation, and integrating the cause of the alerts, the aftermath of the alerts, and the baselines to output an alert interpretation graph to a user interface of a user device.

Abstract: Systems and methods are disclosed for securing an enterprise environment by detecting suspicious software. A global program lineage graph is constructed. Construction of the global program lineage graph includes creating a node for each version of a program having been installed on a set of user machines. Additionally, at least two nodes are linked with a directional edge. For each version of the program, a prevalence number of the set of user machines on which each version of the program had been installed is determined; and the prevalence number is recorded to the metadata associated with the respective node. Anomalous behavior is identified based on structures formed by the at least two nodes and associated directional edge in the global program lineage graph. An alarm is displayed on a graphical user interface for each suspicious software based on the identified anomalous behavior.

Abstract: Systems and methods for data reduction including organizing data of an event stream into a file access table concurrently with receiving the event stream, the data including independent features and dependent features. A frequent pattern tree (FP-Tree) is built including nodes corresponding to the dependent features according to a frequency of occurrence of the dependent features relative to the independent features. Each single path in the FP-Tree is merged into a special node corresponding to segments of dependent features to produce a reduced FP-Tree. All path combinations in the reduced FP-Tree are identified. A compressible file access template (CFAT) is generated corresponding to each of the path combinations. The data of the event stream is compressed with the CFATs to reduce the dependent features to special events representing the dependent features.

Abstract: An atomizer comprises an atomizing body, an atomizing base disposed at one end of the atomizing body, and a fixing member installed outside the atomizing base and connected with the atomizing body. The atomizing base is fixed on the atomizing body by the fixing member, and the fixing member is made of a material that can be adsorbed by a magnet and comprises a tabular main body portion corresponding to the atomizing base. The atomizing base is fixed on the atomizing body by the fixing member, and after the atomizer is connected and assembled with a power supply assembly, an adsorption force between the tabular main body portion and the magnet can increase.

Abstract: An electronic cigarette comprises a power supply device, a screw sleeve and an atomizer. The power supply device is provided with a cavity accommodating the atomizer with a cigarette holder exposed outside. The atomizer is provided with a screw joint portion at one end thereof opposite to the cigarette holder, and a middle part of the screw joint portion is provided with a conduction head insulated from the screw sleeve that is made of a conductive material. A bottom part of the cavity is provided with an annular conductor, an adsorption element, and a pole needle extending through a middle part of the annular conductor, and the adsorption element is insulated from the pole needle. The screw sleeve can be adsorbed on the adsorption element, so that the screw sleeve is conductive with the annular conductor, and the conduction head is conductive with the pole needle.

Abstract: The present disclosure may provide an atomizer and an electronic atomization device. The atomizer may include a shell, a heating assembly, a lid, a base, and a first sealing component. The shell defines a liquid cavity and a smoke outlet. The heating assembly may heat and atomize the liquid into a smoke. The lid and the base may be provided to fix the heating assembly therebetween. The lid defines a liquid inlet communicating with the liquid cavity, and the liquid may flow through to reach the heating assembly. The atomizer may define an air entering hole, such that external air may enter the device through the hole to drive smoke to flow. The first sealing component may be engaged between the lid and the heating assembly, contacting both at the same time and defining air guiding channels to guide the air to flow into the liquid cavity.

Abstract: A method for manufacturing a semiconductor-device in which a semiconductor-substrate is provided, including a SOI-wafer having a carrier-layer (CL) defining a rear-side, a functional-layer (FL), an insulation-layer (IL) situated between the CL and FL, and a passivation-layer (PL) applied to the FL and defining a front-side. The FL includes a functional-area having functional-structures. The front-side of the semiconductor-substrate is masked, a first-mask opening being configured, which defines an interior-area containing the functional-area, and the PL and FL are removed by etching the front-side of the semiconductor-substrate. The rear-side of the semiconductor-substrate is masked, a second-mask opening being configured, and a circumferential-edge of the second-mask opening being spaced outwardly relative to an outer-circumferential-edge of the interior-area.

Abstract: An air, sea, land and underwater tilt tri-rotor UAV capable of performing vertical take-off and landing. By the method for controlling a submerged floating device and a tilt tri-rotor device, the UAV is switched among the vertical take-off and landing mode, fixed wing mode, water surface sailing mode and underwater submerging mode, thereby making same have the advantages of four kinds of UAVs, and enhancing the applicability, maneuverability and efficiency of UAV. This has high efficiency in power system, has obviously improved endurance time and flight distance as compared with the traditional multi rotor UAV because of having the fixed wing mode, is applicable to more scenarios, and may operate on flat land, mountain land, water surface and underwater, thereby completing designated missions such as aerial, ground, water surface and underwater investigation, survey and concealment.

Abstract: A system and computer-implemented method are provided for host level detection of malicious Domain Name System (DNS) activities in a network environment having multiple end-hosts. The system includes a set of DNS resolver agents configured to (i) gather DNS activities from each of the multiple end-hosts by recording DNS queries and DNS responses corresponding to the DNS queries, and (ii) associate the DNS activities with Program Identifiers (PIDs) that identify programs that issued the DNS queries. The system further includes a backend server configured to detect one or more of the malicious DNS activities based on the gathered DNS activities and the PIDs.

Abstract: Methods and systems for security analysis include determining whether a process has an origin internal to a system or external to the system using a processor based on monitored behavior events associated with the process. A security analysis is performed on only processes that have an external origin to determine if any of the processes having an external origin represent a security threat. A security action is performed if a process having an external origin is determined to represent a security threat.

Abstract: An electronic cigarette and a power supply device, having a power supply body provided with a receiving portion thereon; the receiving portion has a receiving chamber for accommodating an atomization device and an extending opening for a holder of the atomization device to extend outwards. The receiving chamber is internally provided with a connection assembly comprising a mounting seat for a connection joint to be detachably connected on the atomization device; the mounting seat is rotatably disposed with the atomization device, and the receiving chamber is internally provided with a position-limit mechanism defining a rotation range of the mounting seat. The atomization device and the mounting seat can be rotated to adjust a direction of rotation of the flat cigarette holder on the atomization device after the atomization device is connected to the mounting seat so as to meet different smoking needs of users.

Abstract: A computer-implemented method for performing privilege flow analysis is presented. The computer-implemented method includes monitoring at least one program operating system (OS) event handled by a program, generating a privilege flow graph, determining an inferred program behavior context, and generating, based on a combination of the privilege flow graph and the inferred program behavior context, an inferred behavior context-aware privilege flow graph to distinguish different roles of processes and/or threads within the program.

Abstract: An electric mop includes a handle, a flopping member connected to the handle. The mopping member includes a driving member with an output thereof connected to a pair of cleaning portions. The driving member includes a motor with an output shaft thereof connected to a driving bevel gear, a reversing gear formed a right-angle transmission relationship with the driving bevel gear, and a pair of cylindrical gear groups respectively connected to the pair of cleaning portions. The difference between the number of cylindrical gears of the two groups is singular. The structure drives the two cleaning portions respectively rotation forward and backward by the driving member so that force of the two cleaning portions can be offset each other for users to keep balance and steadily control a moving direction of the electric mop, the two cleaning portions are provided for ensuring a large cleaning surface and cleaning some corners.

Abstract: The present disclosure relates to an electronic cigarette, including an atomizing device and a power device, the power device is connected to the atomizing device and supplies power to the atomizing device, such that the atomizing device atomizes e-liquid and generate smoke. The power device includes a stand and a liquid accumulating member provided at one end of the stand adjacent to the atomizing device, one side of the liquid accumulating member adjacent to the atomizing device forms a liquid accumulating cavity used to store the e-liquid exuded by the atomizing device.

Abstract: A coated plate is provided. The coated plate includes a light-transmitting substrate and a film layer arranged on one side of the light-transmitting substrate. The film layer is a full dielectric film, and the film layer includes a high refractive index material film. The refractive index of the high refractive index material film is higher than that of the light-transmitting substrate. A preparation method of the coated plate and a solar module are also provided.

Abstract: A solar module is provided, comprising a front plate, a film, a solar cell and a back plate which are arranged in sequence, or comprising a front plate, a film, a solar cell, a film and a back plate which are arranged in sequence, wherein the front plate is a colored light-transmitting front plate.

Abstract: A curved-surface coated plate is provided. The curved-surface coated plate includes a curved-surface light-transmitting substrate and a film layer arranged on one side of the curved-surface light-transmitting substrate. The film layer is a full dielectric film and includes a high refractive index material film whose refractive index is higher than that of the curved-surface light-transmitting substrate. A method for preparing the curved-surface coated plate and a solar module including the curved-surface coated plate are also provided.