Abstract: A product obsolescence forecast system includes machine instructions stored in a non-transitory computer readable storage medium, the machine instructions. A processor executes the instructions to receive an identity of a first product and identities of one or more second products similar to the first product, each of the second products having gone obsolete; receive a determinant of obsolescence of one or more of the obsolete second products; generate one or more observations related to the first product by inputting each received determinant to a trained network; and generate a statistical analysis of the one or more observations to provide an expected value of an actual obsolescence date for the first product.

Abstract: Disclosed herein are embodiments of systems, methods, and products comprising an analytic server that automates training dataset generation for different application areas. The server may perform an automated, iterative refinement process to build a collection of dataset generator models over time. The server may receive a set of seed examples in a domain and generate candidate examples based on the features of the seed examples using data synthesis techniques. The server may execute a pre-trained label discriminator (LD) and domain discriminator (D2) on the candidate examples. The LD may identify and reject mislabeled data. The D2 may identify and reject out of domain data. The analytic server may regenerate new labeled data based on the feedback of the LD and D2. The analytic server may train a dataset generator by iteratively performing these steps for refinement until the regenerated candidate examples reach a pass rate threshold.

Abstract: A system includes network nodes, such as, multiple computing devices and multiple software defined radios. The network nodes accurately and timely detects, identifies, locates, and responds to an unmanned aircraft system within a predetermined area. The network nodes use a communications control link between the unmanned aircraft system and a controller of the unmanned aircraft system to detect, identify, locate, and respond to the unmanned aircraft system. The network nodes are deployed over the predetermined area to maintain airspace situational awareness of the unmanned aircraft system, and deploy targeted countermeasures to counteract identified threats associated with the presence of the unmanned aircraft system within the predetermined area.

Abstract: A real-time recommendation system includes a non-transitory, computer-readable storage medium having encoded thereon instructions that a processor executes to receive data from data sources that includes one or more data records. The processor then identifies features in data of a data record, extracts and buffers the features, and applies the features to a feature detect mechanism. The feature detect mechanism includes feature detect algorithm and more recommender algorithms that are encapsulated in a feature detection object. The feature detection object may be a Strategy/Composite feature detection object that includes Strategy design patterns. The processor further executes to reject a feature in response to failures of the feature to match at least one of the Strategy design patterns, and in real time, select and install features that match one or more of the Strategy design patterns into one or more recommender algorithms.

Abstract: A computer-implemented method of securing vulnerabilities in a program, the method including receiving, by a computer, state information generated by an executed application program, training, by the computer, a constraints model based on the state information, generating, by the computer, one or more constraints with the constraints model, each of the one or more constraints describing an execution constraint for executing the application program, wherein the execution constraint enforces an intended operation of the application program, and applying, by the computer, the one or more constraints to the application program.

Abstract: Disclosed herein are embodiments of systems, methods, and products that provide adversary detection and threat hunting. A server may comprise a user side virtual machine facing the cyber protection users, a collection virtual machine facing the at-risk network, and a data repository. The server may receive user requests requesting status data from the at-risk network via the user side virtual machine. The server may collect status data from the at-risk network via the collection virtual machine and store the collected data into the data repository. Different users may request duplicate information from the at-risk network. The server may retrieve the requested information from the data repository for duplicate requests and return the responses immediately for such requests. Because the server does not query the at-risk network for duplicate requests, the server may reduce the amount of bandwidth needed to acquire and distribute the requested information.

Abstract: A software migration system includes a processor; a user interface that receives and displays components of a legacy software and a new software system; and a migration program as machine instructions stored on a non-transitory, computer-readable storage medium. The processor executes to identify reference models, standards, and requirements of a system common architecture that together define a process for migrating the legacy software to the new software system; load the legacy software onto a virtual machine instantiated on a dedicated hardware platform; refactor the legacy software; subdivide the refactored legacy software into legacy software subsets; move a first legacy software subset to a second virtual machine instantiated on the hardware platform; for a second legacy software subset, adapt the second legacy software subset to the system common architecture; and combine the adapted second legacy software subset and the first legacy software subset to produce the new software system.

Abstract: This disclosure is directed to monitoring a crypto-partitioned, or cipher-text, wide-area network (WAN). A first computing device may be situated in a plain-text portion of a first enclave behind a first inline network encryptor (INE). A second device may be positioned in a plain-text portion of a second enclave behind a second INE. The two enclaves may be separated by a cipher-text WAN, over which the two enclaved may communicate. The first computing device may receive a data packet from the second computing device. The first computing device may then determine contents of a header of the data packet. The first computing device may, based at least in part on the contents of the header of the data packet, determine a status of the cipher-text WAN.

Abstract: Disclosed herein are embodiments of systems and methods that dynamically reconfigure a multi-tiered system of network devices and software applications in response to an ongoing and/or anticipated cyber-attack. The dynamic reconfiguration of the network devices may consist of a wide range of processes, which may include generating new network addresses for individual network devices; reconfiguring the network devices by creating firewalls, changing protocols between the network devices in a multi-tier reconfiguration solution, changing the cloud infrastructure provider of the network devices, even when the underlying network infrastructure ecosystem differs across cloud service providers (CSPs); and maintaining a secure and updated data model of a record of reconfigured network devices and their dependencies to allow legitimate users of the network devices to understand reconfiguration actions that are hidden from malicious users such as hackers and cyber-attackers.

Abstract: A method, executed by a processor, includes the processor receiving signals information from a device located on a departing airplane; verifying an identification of the airplane and identifying an expected departure sequence of aircraft surface states; monitoring and identifying additional signals information received from the mobile device, including comparing the additional signals information to known data; logging the additional signals information, and processing the additional signals information, and determining the logged data corresponds to events indicative of an aircraft surface state; sending an aircraft surface state reached message to Local and Center flight management; and executing a statistical routine and providing statistical data from the execution relating to an occurrence of upcoming aircraft surface state event and sending the statistical data with the aircraft surface state message.

Abstract: Disclosed herein are embodiments of systems, methods, and products comprise an analytic server, which improves the cybersecurity of a unified system comprising a plurality of sub-systems. The analytic server may instantiate a sub attack tree for each network sub-system within the unified system of distributed network infrastructure. The analytic server may access the sub attack trees of the network sub-systems based on the corresponding identifiers. The analytic server may build a high-level attack tree of the unified system by aggregating the sub attack tree of each sub-system. The analytic server may determine how the interconnection of the plurality of network sub-systems may affect the unified system security. The analytic server may update one or more nodes of the attack tree to reflect the changes produced from the interconnection. The analytic server may build the attack tree based on a set of aggregation rules.

Abstract: Disclosed herein are embodiments of an optical character recognition pre-processing software system, which is integrated into a language translation system to provide automated cleaning and correction of noisy and degraded document images to enable seamless and efficient optical character recognition processing and machine translation of information within the document images.

Abstract: An illustrative system may comprise a plurality of distributed network nodes hosting a two-dimensional distributed digital ledger. The distributed digital ledger may have a plurality of chains of digital blocks in the two-dimensions, wherein each chain may be associated with a particular functionality (e.g., a first set of integrated circuit processes) and a corresponding level of security. For example, a first chain in the first direction may contain digital blocks containing code differentials of the hardware description language code forming the integrated circuit design. A second chain in a second direction may contain digital blocks containing simulation data records generated during the simulation of the integrated circuit design. The first chain and the second chain may be based upon different cryptographic protocols and therefore may be cryptographically separate from each other.

Abstract: Disclosed herein are embodiments of systems, methods, and products comprise a computing device, which provides a secure data transport service (SecureX) for data packets traversing from an end user device (EUD) to a mission network over untrusted networks. The disclosed SecureX module may be software product running on the EUD and on a SecureX appliance fronting the mission network. The SecureX module on the EUD compresses the data packets by removing header fields that are constant over the same packet flow and double encrypts the data packets with different cryptographic keys. The SecureX on the EUD transmits the double compressed encrypted data packets over the untrusted network. The SecureX appliance receives the double compressed encrypted data packets, decrypts the data packets and decompresses the data packets to recreate the original data packets. The SecureX appliance transmits the original data packets to the mission network.

Abstract: A plurality of interconnected distributed networks each having a plurality of distributed network nodes provide a decentralized access gateway to multiple, diverse types of databases. Each distributed network may be a structured distributed network having at least two tiers of nodes comprising validator nodes that may implement gossip protocols to cooperatively validate one or more database operations and generate new blocks and host nodes that may receive the new block and update a corresponding local copy. Each distributed network may correspond to different attributes and may be interconnected to increase query efficiency. To access/query data, parallel queries may be performed on more than one distributed networks.

Abstract: A method for detecting, identifying, and mitigating advanced persistent threats in a computer network having one or more computers includes a processor in the computer network: receiving a request to access a resource in the computer network; identifying the request as originating from an application executing on the computer network; executing an anomaly operation to determine a behavior of the application is one of anomalous and not anomalous; executing a privilege operation to determine the request is one of permanently allowed and not-permanently allowed; granting access to the resource for both a non-anomalous-behaving application and a permanently allowed request; and generating and displaying, on a graphical user interface of the computer network, and prompt for either an anomalous-behaving application or a not-permanently allowed request.

Abstract: A communication optimization system/method for mobile networks uses a server that generates waypoints based on a first communication network within a route to be travelled by an aerial vehicle, the aerial vehicle comprising a communication hub configured to communicate with at least one communication node, a communication hub controller configured control movement of a steerable antenna, and an aerial vehicle controller configured control movement of the aerial vehicle. The server then transmits the waypoints to the aerial vehicle controller; periodically monitors networks not connected to the communication hub; when a second communication network not connected to the communication hub satisfies a threshold, transmits causes the communication controller to steer the steerable antenna in a direction of the second communication network, further causing the communication hub to communicate and connect with the second communication network.

Abstract: Disclosed herein are embodiments for managing a task including one or more skills. A server stores a virtual environment, software agents configured to collect data generated when a user interacts with the virtual environment to perform the task, and a predictive machine learning model. The server generates virtual entities during the performance of the task, and executes the predictive machine learning model to configure the virtual entities based upon data generated when the user interacts with the virtual environment. The server generates the virtual environment and the virtual entities configured for interaction with the user during display by the client device, and receives the data collected by the software agents. The system displays a user interface at the client device to indicate a measurement of each of the skills during performance of the task. The server trains the predictive machine learning model using this measurement of skills during task performance.

Abstract: A terminal area noise management method includes receiving, at a processor, aircraft information for an aircraft operating in a region in proximity to an airport; accessing a plurality of terminal area flight paths available to the aircraft; estimating a plurality of noise profiles for the aircraft, one estimated noise profile for the aircraft for each of the plurality of flight paths; calculating a plurality of cumulative noise fairness measures using each estimated noise profile; calculating a plurality of operational efficiency values for the aircraft, one or more of the calculated operational efficiency values for the aircraft for each of the flight paths; calculating a plurality of cumulative operational fairness measures using each of the calculated operational efficiency values; and selecting a flight path for the aircraft based on maximizing a cumulative noise fairness measure and a cumulative operational fairness measure.

Abstract: Disclosed herein are embodiments of systems, methods, and apparatus that execute classification techniques to enable high-quality analysis of ingest data by interpreting and categorizing disparate data points of the ingest data. The execution of the classification techniques leads to isolation of intrinsic properties of each data point to represent the essence of what the overall ingest data indicates. The classification techniques further enables classification of the ingest data, which is unencumbered by any ingest data format changes, such as ordering of data components, encoding, or properties associated with the ingest data that are likely to change without altering meaning conveyed by the ingest data.