Abstract: In general, the disclosure relates to techniques for identifying a reduced set of remediation actions that are to be performed by a network endpoint to achieve compliance with a security policy defined by a network entity. One example method comprises receiving integrity data via a network from a network endpoint, performing a plurality of tests on the integrity data to generate corresponding test results, identifying a set of remediation actions based upon the test results, and comparing the remediation actions in the set. The method further comprises eliminating at least one remediation action in the set based upon the comparison to form a reduced set of remediation actions, and sending the reduced set of remediation actions to the network endpoint, wherein each remediation action in the reduced set specifies an action to be performed by the network endpoint to achieve compliance with a security policy.

Abstract: A device receives, from a managed device, endpoint information associated with an unmanaged device connected to the managed device in a network. The device also receives unmanaged device information that partially identifies the unmanaged device, and completely identifies the unmanaged device based on the endpoint information and the unmanaged device information.

Abstract: A biocompatible, implantable electrode for electrically active medical devices. The implantable medical electrode has a surface geometry which optimizes the electrical performance of the electrode, while mitigating the undesirable effects associated with prior art porous surfaces. The electrode has an optimized surface topography for improved electrical performance. Such a electrode is suitable for devices which may be permanently implanted in the human body as stimulation electrodes, such as pacemakers, or as sensors of medical conditions. Such is achieved by the application of ultrafast high energy pulses to the surface of a solid, monolithic electrode material for the purpose of increasing the surface area and thereby decreasing its after-potential polarization.

Abstract: A system and method for detecting malware on a limited access mobile platform in a mobile network. The system and method uses one or more feature sets that describe various non-executable portions of malware-infected and malware-free applications, and compares a application on the limited access mobile platform to the features sets. A match of the features in a suspect application to one of the feature sets provides an indication as to whether the suspect application is malware-infected or malware-free.

Abstract: A titanium based, ceramic reinforced alloy ingot for use in producing medical implants. An ingot is formed from an alloy having comprising from about 5 to about 35 wt. % niobium, from about 0.5 to about 3.5 wt. % silicon, and from about 61.5 to about 94.5 wt. % of titanium. The alloy has a hexagonal crystal lattice ? phase of from about 20 vol % to about 70 vol %, and a cubic body centered ? crystal lattice phase of from about 30 vol. % to about 80 vol. %. The ingot has an ultimate tensile strength of about 940 MPa or more, and a Young's modulus of about 150 GPa or less. A molten substantially uniform admixture of a niobium, silicon, and titanium alloy is formed, cast into a shape, and cooled into an ingot. The ingot may then be formed into a medical implant and optionally annealed.

Abstract: A system and method for detecting malware in compressed data. The system and method identifies a set of search strings extracted from compressed executables, each of which is infected with malware from a family of malware. The search strings detect the presence of the family of malware in other compressed executables, fragments of compressed executables, or data streams.

Abstract: A system for the physical manipulation of free magnetic rotors in a circulatory system using a remotely placed magnetic field-generating stator is provided. In one embodiment, the invention relates to the control of magnetic particles in a fluid medium using permanent magnet-based or electromagnetic field-generating stator sources. Such a system can be useful for increasing the diffusion of therapeutic agents in a fluid medium, such as a human circulatory system, which can result in substantial clearance of fluid obstructions, such as vascular occlusions, in a circulatory system resulting in increased blood flow. Examples of vascular occlusions targeted by the system include, but are not limited to, atherosclerotic plaques, including fibrous caps, fatty buildup, coronary occlusions, arterial stenosis, restenosis, vein thrombi, arterial thrombi, cerebral thrombi, embolisms, hemorrhages, other blood clots, and very small vessels.

Abstract: A device may include an authentication server and a server. The authentication server may receive a first form of a password from a client in accordance with an authentication protocol, and authenticate the client based on a comparison of the first form to a value derived from a second form of the password stored in a password database. The comparison fails when the first form is not comparable to a value derived from the second form. The server may establish a secure connection to the client, receive a plain-text password from the client over the secure connection, authenticate the client by comparing a value derived from the plain-text password with a value derived from the second form, and update the password database with a third form of the password that permits the authentication server to successfully authenticate the client when the authentication server receives the first form.

Abstract: In one example, a system includes a first computing device configured to execute a virtual machine, wherein the virtual machine is communicatively coupled to a virtual private network (VPN) via a first attachment circuit using a first set of network parameters, stop execution of the virtual machine, and create checkpoint data for the virtual machine, and a second computing device configured to execute the virtual machine, using at least some of the checkpoint data, and to cause the virtual machine to become communicatively coupled to the VPN via a second attachment circuit using a second set of network parameters different from the first set of network parameters. The system may further include a first provider edge (PE) routing device communicatively coupled to the first computing device via the first attachment circuit, and a second PE routing device communicatively coupled to the second computing device via the second attachment circuit.

Abstract: A right-hand circular polarized antenna and associated methods. In one embodiment, a quarter-wave antenna configuration is used within a small form factor portable device (e.g. wristwatch). The antenna comprises a radiator element which operates in as a linear polarized antenna while the device is operating in free space. However, when the device is attached to a user (e.g. at a user's wrist), the antenna utilizes the loading of the user's body tissue in order to suppress unwanted signals (e.g. left hand polarized signals) to permit operation in circular polarized mode (e.g. right hand polarized mode), thereby allowing for increased sensitivity to received circularly polarized signals such as those emanated from global positioning satellites.

Abstract: In general, techniques are described for provisioning layer two access in computer networks. A network device located in a public network comprising an interface and a control unit may implement the techniques. The interface establishes a session with a mobile device. The control unit requests security state data identifying a security state of the mobile device via the established session. The interface receives a mobile device identifier and the security state data from the mobile device via the session. The mobile device identifier identifies the mobile device. The control unit publishes the security state information to a database such that the security state information is associated with the mobile device identifier.

Abstract: A network device, such as a policy server, supports a plurality of different layer two (L2) networks. The network device receives a request to initiate a communication session from an endpoint device, selects an L2 network to which to assign the endpoint device, and assigns the endpoint device to the selected L2 network, selects one of a plurality of L3 network addresses for the policy server based on the selected L2 network, and sends the L3 network address to the endpoint device. The network device also includes a monitoring module that monitors activities of the endpoint device, and a plurality of L2 network interfaces, wherein each L2 network interface is associated with at least one L2 network. The L2 networks may be virtual local area networks.

Abstract: An integrated, multi-service network client for cellular mobile devices is described. The multi-service network client can be deployed as a single software package on cellular mobile network devices to provide integrated services including secure enterprise virtual private network (VPN) connectivity, acceleration, security management including monitored and enforced endpoint compliance, and collaboration services. Once installed on the cellular mobile device, the multi-service client integrates with an operating system of the device to provide a single entry point for user authentication for secure enterprise connectivity, endpoint security services including endpoint compliance with respect to anti-virus and spyware software, and comprehensive integrity checks.

Abstract: Some embodiments provide a system for external manipulation of magnetic nanoparticles in vasculature using a remotely placed magnetic field-generating stator. In one aspect, the systems and methods relate to the control of magnetic nanoparticles in a fluid medium using permanent magnet-based or electromagnetic field-generating stator sources. Such a system can be useful for increasing the diffusion of therapeutic agents in a fluid medium, such as a human circulatory system, which can result in substantial clearance of fluid obstructions, such as vascular occlusions, in a circulatory system resulting in increased blood flow.

Abstract: A biocompatible, implantable electrode for electrically active medical devices. The implantable medical electrode has a surface geometry which optimizes the electrical performance of the electrode, while mitigating the undesirable effects associated with prior art porous surfaces. The electrode has an optimized surface topography for improved electrical performance. Such a electrode is suitable for devices which may be permanently implanted in the human body as stimulation electrodes, such as pacemakers, or as sensors of medical conditions. Such is achieved by the application of ultrafast high energy pulses to the surface of a solid, monolithic electrode material for the purpose of increasing the surface area and thereby decreasing its after-potential polarization.

Abstract: A first aspect relates to an apparatus, system and method for calculating a driving behaviour risk indicator for a driver of a vehicle. Said aspect involves obtaining a count of events occurring in each of a plurality of predetermined categories based on inputs from an inertial unit mounted on the vehicle, the inertial unit including a 3D inertial sensor with 3D gyroscope functionality, each event being indicative of at least one of dangerous and aggressive driving; and calculating a driving behaviour risk indicator based on the number of events in each category. According to a second aspect, an apparatus and method for reconstructing a vehicle trajectory is provided. Said aspect includes updating a sensor error model.

Abstract: An advanced modular plug connector assembly incorporating an insert assembly disposed in the rear portion of the connector housing. In one embodiment, the connector has a plurality of ports in multi-row configuration, and the insert assembly includes a substrate adapted to receive one or more electronic components such as choke coils, transformers, or other signal conditioning elements or magnetics. The substrate also interfaces with the conductors of two modular ports of the connector, and is removable from the housing such that an insert assembly of a different electronics or terminal configuration can be substituted therefor. In this fashion, the connector can be configured to a plurality of different standards (e.g., Gigabit Ethernet and 10/100). In yet another embodiment, the connector assembly comprises a plurality of light sources (e.g., LEDs) received within the housing. Methods for manufacturing the aforementioned embodiments are also disclosed.

Abstract: A multiband dipole antenna solution suitable for use in various wireless device applications, and methods of tuning and utilizing the same. In one embodiment, the antenna is adapted for use in long term evolution (LTE or LTE-A) radio devices. In one implementation, the antenna comprises (i) two planar directly fed radiating elements operating in a lower frequency band and disposed on two opposing sides of a dielectric structure, and (ii) two electromagnetically coupled radiating elements operating in an upper frequency band also disposed on the opposing sides of the dielectric structure. An additional pair of electromagnetically coupled radiator elements is utilized to achieve wider antenna operating bandwidth.

Abstract: A wire-less inductive device and methods of manufacturing and use are disclosed. In one embodiment, the inductive device comprises a plurality of through-hole vias which act to replace windings disposed around a magnetically permeable core. In another embodiment, the inductive device comprises a plurality of connection elements disposed or formed within channels which act as windings disposed around a magnetically permeable core. In a second aspect of the invention, a method of manufacturing the aforementioned inductive devices is disclosed. In a third aspect of the invention, an electronics assembly and circuit comprising the wire-less inductive devices are disclosed.

Abstract: The present invention provides methods of and systems for predicting performance of a mobile application. A first mobile application is installed on a first plurality of wireless mobile devices. Operational data resulting from operating the first mobile application on the first plurality of mobile devices is collected. A second mobile application is installed on a second plurality of mobile devices. Test data resulting from operating the second the mobile application on the second plurality of mobile devices is collected. The performance of the second mobile application is predicted using the operational data and the test data for combinations of mobile device configuration and wireless network connection type not represented by the second plurality of mobile devices.