Abstract: There is set forth herein obtaining data traffic monitoring data, the data traffic monitoring data being in dependence on monitoring of traffic received by a container of a protected computing environment; obtaining data traffic monitoring data, the data traffic monitoring data being in dependence on monitoring of traffic received by a processing resource of a computing environment; obtaining a state of the processing resource and provisioning a utility processing resource to include the state of the processing resource; and configuring the computing environment to route data traffic to the utility processing resource.

Abstract: A control apparatus with automated test suites according to an embodiment includes capability information storage, and at least one hardware processor configured to function as an analyzer, an organizer, and an executor. The capability information storage stores therein a plurality of capabilities defining actions indicating attack methods. The analyzer parses at least one of network structure information of a system under test and vulnerability information of the system under test to extract the actions from the capabilities. The organizer generates an attack path through which an achieved state of an attack goal is reached by combining the actions extracted by the analyzer. The executor executes the actions included in the attack path.

Abstract: A computer-implemented method, computer program product and computer system include a processor(s) receiving request from a first client for an attribute of a first service node to utilize to access the service provided. The processor(s) provides the attribute of the first service node to the first client. The processor(s) accepts an access to the service by the first client, based on the first client utilizing the attribute to connect to the first service node. The processor(s) identifies attributes of one or more clients accessing the service via the first service node, including the first client. The processor(s) experiences an event indicating a need to change security protecting access to the service. The processor(s) redistributes the one or more clients to at least two additional service nodes.

Abstract: A computer program product, a computer-implemented method, and a computer system include a processor(s) that obtains side channel emanations from a device. The processor(s) analyzes the side channel emanations to identify distinct emanation patterns and timing characteristics, wherein the timing characteristics are associated with transitions between the distinct emanation patterns. The processor(s) generates a non-deterministic finite automaton (NFA) by correlating the distinct emanation patterns with states of the device, where the NFA captures states and state transitions of the device. The processor(s) identifies an anomaly in the device, based on deviation in emanations from the device.

Abstract: A system and method for secure communications is disclosed which includes a processor(s) of a first appliqué spreading an uplink signal of a user from user equipment, where the first appliqué is coupled to the user equipment, and where the user equipment is connected to a mobile network. The processor(s) frequency shifts the spread uplink signal to maintain orthogonality over the mobile network.

Abstract: Embodiments of the present invention include a system, method and computer program product for mitigating interference in data received by a multiple antenna array. Processor(s) executing program code identify signals from users, including active users, and by identifying these signals, mitigate interference and jamming in the received data, overall.

Abstract: A method, computer program product, and system where a processor(s) in a distributed computing environment intercepts a communication (of sequential elements) between a first computing node and a second computing node. The processor(s) determines if the communication is undesired by evaluating data related to or comprising each element individually.

Abstract: A packet intercept system includes probes along the field area network. A portion of the probes are mobile probes configured to receive and process a global positioning system signal. Intercepting by the mobile probes includes implementing a global positioning tag in each packet in the traffic data stream intercepted by the mobile probes, the global positioning tag includes a timestamp and global positioning system coordinates, derived from the global position system signal. The packet intercept system backhauls the traffic data stream to an additional network that is distinct from the field area network. Processors on the additional network obtain the traffic data stream and process the stream into a live traffic data stream by ordering each packet intercepted by the mobile probes in the processed live traffic data stream, based on the timestamp. The processors analyze the processed live traffic data stream.

Abstract: Methods and apparatus are set forth herein. Methods and apparatus can include for example: receiving for input into an non-linear device a radio signal, the radio signal being a composite signal composed of a signal of interest and an interfering signal, wherein the signal of interest and the interfering signal are at a common frequency; controlling a power level of the radio frequency input signal received at the non-linear device so that the non-linear device provides a non-linear effect; and processing an output signal output by the non-linear device to determine a characteristic of the signal of interest.

Abstract: A first controller in a distributed network obtains, concurrently with a second controller in the distributed network, a system requirement and a message from a logical bus. The first controller and the second controller are communicatively coupled to the logical bus, and the first controller is communicatively coupled to a first portion of the network components and the second controller is communicatively coupled to a second portion. A processor associated with the first controller solves, concurrently with the second controller, the system requirement and the solving includes applying a solver to generate new configurations of the network components. The new configurations generated by the first controller are identical to the new configurations generated by the second controller. The first controller extracts configurations relevant to the first portion of the network components and applies the configurations to the first portion of the network components.

Abstract: A system and method for generating copies of a signal includes a first radiation source configured for providing a plurality of pump radiation beams, a second radiation source configured for providing a signal radiation beam, and a second-order nonlinear optical medium to receive the plurality of pump radiation beams from the first radiation source and the signal radiation beam from the second radiation source and to emit a plurality of idlers, where the plurality of idlers are low-noise copies of the signal.

Abstract: A method, computer program product, and system for generating a unique (deceptive) view of a network, the method includes a processor generating, for a host on a computing network, a virtual network topology view, where the virtual network topology view of the network host differs from a physical network topology of the computing network, wherein the network node perceives the computing network as comprising a network topology of the virtual network topology view. The generating includes: the processor modifying naming and addressing services of network components communicatively coupled to the network host and transforming network flows between the network resources viewable by the network host in the virtual network topology view, to be consistent with the virtual network topology view.

Abstract: A method, computer system, and computer program product include identifying, by one or more processors, a node in a network, where the node includes an incorrect configuration, where the incorrect configuration is a configuration utilized by a first communications protocol for communication with the node, and where the node includes another configuration utilized by a second communications protocol, for communication with the node. The one or more processors utilize the second communications protocol and the other configuration to access the node over the network and reconfigure the node to update the incorrect configuration to a new configuration.

Abstract: A method, system, and computer program product configure elements of a hybrid network. The method may include a processor obtaining at a first controller communicatively coupled to components of a hybrid network, a requirement for the hybrid network; the components include a first component type and a second component type. After obtaining the requirement, the processor generates a plan to configure a component of the first component type and a component of the second component type. The processor configures the component of the first component type according to a first portion of the plan by utilizing a security protocol over an unsecured connection. The processor configures the component of the second component type according to a second portion of the plan by transmitting this portion to a controller of components of the second component type in the hybrid network. The controller configures the component upon receipt of the portion.

Abstract: A computer program product, computer system, and method for performing traffic analysis on a wireless mesh network, includes intercepting a stream of real-time wireless from field probes on the wireless mesh network, wherein the stream comprises non-standard protocol elements and encrypted traffic, creating an ad hoc network parallel to the wireless mesh network, obtaining, from the ad hoc network, the intercepted stream (the analyzing is performed parallel to traffic flow on the wireless mesh network), pre-processing a portion of the intercepted stream the data, where the pre-processing comprises descrambling and processing headers in the stream to differentiate the packets in the stream and create a combined output stream, obtaining the combined output stream and creating indicators by selecting an analysis operator to apply to one or more dissected fields extracted from the output stream, analyzing the packets in the combined output stream utilizing the indicators, and obtaining results from the indicators