Abstract: Kernel-based intrusion detection using Bloom filters is disclosed. In one of many possible embodiments for detecting an intrusion attack, a Bloom filter is provided and used to generate a Bloom filter data object. The Bloom filter data object contains data representative of expected system-call behavior associated with a computer program. The Bloom filter data object is embedded in an operating system (“OS”) kernel upon an invocation of the computer program. Actual system-call behavior is compared with the data in the Bloom filter data object.

Abstract: The invention relates to topic classification systems in which text intervals are represented as proposition trees. Free-text queries and candidate responses are transformed into proposition trees, and a particular candidate response can be matched to a free-text query by transforming the proposition trees of the free-text query into the proposition trees of the candidate responses. Because proposition trees are able to capture semantic information of text intervals, the topic classification system accounts for the relative importance of topic words, for paraphrases and re-wordings, and for omissions and additions. Redundancy of two text intervals can also be identified.

Abstract: A system for exchanging routing information over a communications network constructs a connectivity graph that indicates connectivity between a first node and a first set of nodes in the network. The system constructs an adjacency graph that indicates a second set of nodes with which the first node will exchange routing data, where the adjacency graph is distinct from the connectivity graph. The system exchanges routing data between the first node and each node of the second set of nodes based on the adjacency graph.

Abstract: A remote control device (140, 600) controls the operation of an appliance. The remote control device (140, 600) includes a receiver (320) or transceiver (620), a controller (330, 630), and a transmitter (350, 650). The receiver (320) or transceiver (620) receives a network packet that includes at least one command. The controller (330, 630) analyzes the network packet to determine whether the packet is intended for the remote control device (140, 600). The transmitter (350, 650) outputs a signal to control operation of the appliance based on the command when the controller (330, 630) determines that the packet is intended for the remote control device (140, 600).

Abstract: A method (200) and program (100) for inhibiting attack upon a computer (120) is provided. The address (104) of a process (106) is produced (612), and encrypted (616) to produce an encrypted address (518), which is then stored in memory (128). When needed, the encrypted address (518) is retrieved (702) from memory (128) and decrypted (704) to reproduce the original process address (104). The reproduced process address (104) is then verified (708). If the process address (104) is determined (708) to be valid, i.e., there was no attack, then the process address (104) is placed (712) in the program counter (318), and a valid process (106) is executed. If the process address (104) is determined (708) to be invalid, i.e., there was an attack, then the address (108) of a crash and terminate process (110) is placed (716) in the program counter (318) and the computer (120) crashes. A nonce value (512) may be generated (602) and encrypted (616) and decrypted (704) in conjunction with the process address (104).

Abstract: A method and system is provided for detecting correlated connections in an extended connection. A plurality of stepping stone detection algorithms are executed in parallel (400), each of the plurality of stepping stone detection algorithms generating a result. The results are scored for each of the plurality of stepping stone detection algorithms (402). A consensus attack path is generated based upon the scored results (404).

Abstract: A method for text recognition includes generating a number of text hypotheses for an image, for example, using an HMM based approach using fixed-width analysis features. For each text hypothesis, one or more segmentations are generated and scored at the segmental level, for example, according to character or character group segments of the text hypothesis. In some embodiments, multiple alternative segmentations are considered for each text hypothesis. In some examples, scores determined in generating the text hypothesis and the segmental score are combined to select an overall text recognition of the image.

Abstract: Systems and methods for facilitating communication including recognizing speech in a first language represented in a first audio signal; forming a first text representation of the speech; processing the first text representation to form data representing a second audio signal; and causing presentation of the second audio signal to a second user while responsive to an interrupt signal from a first user. In some embodiments, processing the first text representation includes translating the first text representation to a second text representation in a second language and processing the second text representation to form the data representing the second audio signal. In some embodiments include accepting an interrupt signal from the first user and interrupting the presentation of the second audio signal.

Abstract: A method includes receiving a process request, identifying a current state of a device in which the process request is to be executed, calculating a power consumption associated with an execution of the process request, and assigning an urgency for the process request, where the urgency corresponds to a time-variant parameter to indicate a measure of necessity for the execution of the process request. The method further includes determining whether the execution of the process request can be delayed to a future time or not based on the current state, the power consumption, and the urgency, and causing the execution of the process request, or causing a delay of the execution of the process request to the future time, based on a result of the determining.

Abstract: The disclosed technology provides a system and method of securely communicating data. An encryptor located at a transmitter can provide encrypted data to the transmitter. The transmitter can maintain a packet number indicating a particular packet for carrying the encrypted data and a sub-packet number indicating a position within the packet where the encrypted data is to be stored. The encryptor can produce the encrypted data using an encryptor seed generated based on the packet number and sub-packet number. A receiver can maintain a receiver packet number indicating a number of previously received packets and can compute a receiver sub-packet number. The receiver can receive a packet containing encrypted data and can decrypt the encrypted data using a decryptor seed generated based on the receiver packet number and sub-packet number.

Abstract: Methods and systems for providing start and stop properties to Semantic Web structured resources and statements are disclosed. The start and stop properties can specify a lifetime during which a resource or statement can be valid. A call or query to one or more resources can return statement data including the start and stop properties for the resources and/or statements. Dates can be specified with the call or query such that the returned resources and statements have lifetimes including the specified dates. Screen images of the data can display subject and object nodes and predicate arcs for the selected dates. A sequence of screen images can display a timeline of nodes and arcs by adding or hiding nodes and arcs to correspond with the start and stop properties of the statements. Tools are provided for the user to navigate through the sequence.

Abstract: A system and method for determining the point of entry of a malicious packet into a network is disclosed. An intrusion detection system detects entry of the malicious packet into the network (500). A stepping stone detection system identifies stepping stones in extended connections within the network (524). A traceback engine isolates the malicious packet in response to operation of the intrusion detection system (528), wherein the traceback engine utilizes the identified stepping stones to determine the point of entry of the malicious packet.

Abstract: Systems and methods are implemented for evaluating underground structures and objects, particularly relatively shallow underground structures and objects, using a seismic or acoustic source signal and a resulting seismic or acoustic wave. A discrete or unitary apparatus incorporates both a seismic source transducer and a receiver transducer within a common housing or frame. A unitary seismic probe includes a ground engaging member and a seismic source mechanically coupled to the ground engaging member. The probe further includes a sensor assembly mechanically coupled to the ground engaging member and configured to sense ground vibrations resulting from an impact to the ground engaging member by the seismic source.

Abstract: Systems, devices, and methods for routing data through a first and a second ad-hoc network are described. Routing information structured according to a first routing protocol associated with a plurality of nodes in the first network is received at a border node that is part of at least the first and second ad-hoc networks. Routing information structured according to a second routing protocol associated with a plurality of nodes in the second ad-hoc network is also received. The received routing information is translated from the first routing protocol to the second routing protocol, or vice versa, and disseminated to nodes in the first or second ad-hoc networks. Data packets from nodes in the first ad-hoc network are forwarded to nodes in the second ad-hoc network, or vice versa, based in part on the translated routing information.

Abstract: Multi-frame persistence of videotext is exploited to mitigate challenges posed by varying characteristics of videotext across frame instances to improve OCR techniques. In some examples, each frame of video is processed to form multiple binary images, and one or more text hypotheses is formed from each binary image. In some examples, one or more combined images are formed from multiple frames processed to form a binary image and a corresponding text hypothesis. The text hypotheses are combined to yield an overall text recognition output.

Abstract: The invention provides a set of methods and systems for obtaining a synchronized signal in a distributed fashion. The methods and systems described herein allow a node to obtain a periodic signal that would be synchronized with the periodic signal obtained at another node when both nodes follow the same synchronizing procedure, without the need for centralized control of both nodes or the need for all nodes to have coordinated local oscillators. The invention includes beamforming methods and systems for producing a coherent beam at a target location and at a target frequency using the synchronized signal.

Abstract: The invention relates to systems and methods of operating a wireless network including allocating and assigning frequency channels using a dynamic and distributed process. For example, a network node in an ad hoc wireless network will assign frequency channels to one or more of its transceivers based on at least one of a list of allowed frequency channels and a neighbor-frequency channel list.

Abstract: Presented herein are systems and methods for generating an adaptive noise codebook for use with electronic speech systems. The noise codebook includes a plurality of entries which may be updated based on environmental noise sounds. The speech system includes a speech codebook and the adaptive noise codebook. The system identifies speech sounds in an audio signal using the speech and noise codebooks.

Abstract: A sensor assembly suitable for use in an airborne shooter localization system. The sensor assembly has a pressure sensor subassembly with a pressure transducer positioned to detect pressure variations associated with a shock wave from a passing projectile or the muzzle blast following the shock wave. To substantially increase the signal to noise ratio for measurements of the shock wave, the pressure sensor subassembly attenuates pressure fluctuations triggered by turbulent airflow over the surface of the subassembly more than it attenuates the shock wave. This preferential attenuation is provided by separating the pressure transducer from the surface of the sensor assembly by a cavity large enough that the pressure fluctuations are substantially attenuated as they propagate across the cavity. Additionally, features of a housing that holds the pressure sensor subassembly facilitate use on an aircraft.

Abstract: A hybrid communications link includes a slow, reliable communications link and a fast unreliable communications link. Communication via the hybrid communications link selectively uses both the slow, reliable communications link and the fast, unreliable communications link.