Abstract: A system and method for the privilege assurance of enterprise computer network environments using attack path detection and prediction. The system uses local session monitors to monitor logon sessions within a network, track session details, and log session and network host details. Cyber-physical graphs are produced and used to identify paths within the network based on the logged information, and to apply risk weighting to the identified paths and determine likely attack paths an attacker may use.

Abstract: A system for network risk assessment for autonomous issuance and management of insurance policies for computer and information technology related risks, including but not limited to business losses due to system availability, cloud computing failures, current and past data breaches, and data integrity issues. The system will use a variety of current risk information to assess the likelihood of business interruption or loss due to both accidental issues and malicious activity. Based on these assessments, the system will be able to autonomously issue policies, adjust premium pricing, process claims, and seek re-insurance opportunities with a minimum of human input.

Abstract: A system and method for determining privilege escalation attack pathways by performing a comprehensive cybersecurity threat assessment of software applications based on the totality of vulnerabilities from all levels of the software supply chain to determine attack paths for a privilege escalation attack. The system and method comprising analyzing the code and/or operation of a software application to determine components comprising the software, identifying the source of such components, determining vulnerabilities associated with those components, compiling a list of such components, creating a directed graph of relationships between the components, their sources, and new exploitation pathways, and evaluating the overall threat associated with the software application based its software vulnerabilities.

Abstract: A system and method for artificial intelligence enhanced mobile energy and data and network control, planning and optimization. The present invention relates to a system and method for optimizing energy and data and network use in mobile platforms, such as facilities, vehicles, tools, and devices. The system leverages AI, data analytics, and context-aware techniques to collect, process, and analyze data from various sources, including sensors, weather data, and spatial and temporal data with locality aware computing, transport, storage and networking across assets that may be owned or operated by multiple stakeholders. By considering a variety of factors, the system generates optimized recommendations for data storage, compute, transmission, device settings, fleet management, and physical and virtual route planning and logic locality planning. The invention offers benefits, including improved energy efficiency, enhanced data and network management, increased operational efficiency, and cost savings.

Abstract: A system and method for automated cybersecurity defensive strategy analysis that predicts the evolution of new cybersecurity attack strategies and makes recommendations for cybersecurity improvements to networked systems based on a cost/benefit analysis. The system and method use machine learning algorithms to run simulated attack and defense strategies against a model of the networked system created using a directed graph. Recommendations are generated based on an analysis of the simulation results against a variety of cost/benefit indicators. The recommendation engine runs continuously, makes suggestions, and takes adjustably autonomous actions to go further and actuate parts of the system using an orchestration service employing a distributed computational graph and actuation plugins based on generated plans. Actions are validated as required or as prudent from appropriate simulation modeling services.

Abstract: A system and methods for pathfinding in two- and three-dimensional spaces using an automated planning service, wherein an automated planning service uses worker nodes to create and process abstract problem spaces representing pathfinding problems, and master nodes coordinate the results of workers to provide efficient multi-agent-aware pathfinding.

Abstract: A system and method for providing time-series geospatial data and a world-scale simulation platform used to generate simulated-world environments by rendering data-dense geographical regions corresponding to heterogenous sourced data and formats for highly scalable parallel simulations, and comprised of a multi-dimensional time-series database used for enabling query support across multiple simulations via individual simulation and entity swimlanes for cyber, physical and cyber-physical entities and regions.

Abstract: A system and method for movement and manipulation of secure data. The system and method combine the ability to restrict and control the transport and processing of data based on specified directives and provide rich auditable provenance to support evidentiary requirements. The system may additionally automatically optimize data routes and specify processing hardware based on data residency, sovereignty, or localization restrictions, constraints, or economic considerations, furthermore, protect sensitive data from compromise by generating and integrating digital tokens and employing observability sensors, processing flows, and analytics on devices in the data transport, storage and compute chain to provide a secure method of data transport and utilization within applications.

Abstract: The provided system and methods describe a Multi-factor Authentication (MFA) kiosk that utilizes various sensors to capture biometric, behavioral, and physiological data for authentication. The kiosk includes a user interface, a set of sensors, and services such as kiosk management, rules configuration, sensor management, and an authentication service. The sensors, both integrated and external, gather diverse data, including facial recognition, fingerprint scans, voice recognition, gait analysis, and more, constructing a physical profile for authentication. The system incorporates a rules service for configuring authentication policies and a sensor management service to optimize sensor performance. Authentication service uses a scoring model, potentially a deep learning algorithm like an autoencoder, to generate an authentication score based on inputs from sensors, rules, and previous attempts. Security measures include encryption, isolation of components, and compliance with data protection regulations.

Abstract: A system and method for gathering and analyzing the value chain relationships between legal entities, people, systems, and real and intangible assets using a temporospatial knowledge graph of the integrated value chain. The system provides the ability to layer private data from paid vendors with end-user owned and public records data to enable more comprehensive, contextualized and complete representations of the underlying value chain. Data analysis techniques, such as deep learning and machine learning, are performed on the knowledge graph and its underlying data set, in conjunction with simulation and modeling, to analyze the value chain, including generation of a risk profile for an entity's value chain and potential optimization options to remediate the identified risks.

Abstract: A system and method for self-adjusting cybersecurity analysis with network mapping, wherein a reconnaissance engine gathers data about a client's computer network from the client, from devices and systems on the client's network, and from the Internet regarding various aspects of cybersecurity. Each of these aspects is evaluated independently, weighted, and cross-referenced to generate a cybersecurity score by aggregating individual vulnerability and risk factors together to provide a comprehensive characterization of cybersecurity risk using a transparent and traceable methodology. The scoring system itself can be used as a state machine with the cybersecurity score acting as a feedback mechanism, in which a cybersecurity score can be set at a level appropriate for a given organization, and data from clients or groups of clients with more extensive reporting can be used to supplement data for clients or groups of clients with less extensive reporting to enhance cybersecurity analysis and scoring.

Abstract: A system and method for analyzing integrated operational technology and information technology systems with sufficient granularity to predict key elements of their composite behavior. The system and method involve creating high-fidelity models of the operational technology and information technology systems using one or more cyber-physical graphs, performing parametric analyses of the models to identify key components, scaling the parametric analyses of the models to analyze the key components at a greater level of granularity, and iteratively improving the models via ongoing search and testing against observed data from the real-world systems.

Abstract: A system and method for comprehensive cybersecurity threat assessment of software applications based on the totality of vulnerabilities from all levels of the software supply chain. The system and method comprising analyzing the code and/or operation of a software application to determine components comprising the software, identifying the source of such components, determining vulnerabilities associated with those components, compiling a list of such components, creating a directed graph of relationships between the components and their sources, and evaluating the overall threat associated with the software application based its software supply chain vulnerabilities.

Abstract: A system and method for trigger-based scanning of cyber-physical assets, including a distributed operating system, parameter evaluation engine, at least one cyber-physical asset, at least one crypt-ledger, a network, and a scanner that detects trigger conditions and events and performs scans of cyber-physical assets based on the trigger and any relevant stored scan rules before storing scan results as time-series data.

Abstract: A system and method for fingerprint-based network mapping of cyber-physical assets, including a distributed operating system, parameter evaluation engine, at least one cyber-physical asset, at least one crypt-ledger, a network, and a scanner that retrieves stored fingerprint records and performs scans of cyber-physical assets to compare against corresponding fingerprints and update a cyber-physical graph based on the success or failure of fingerprint matching.

Abstract: Management and tracking of collaborative projects using a logging service configured to track contributions of a plurality of participants of a monitored project and log the contributions in a graph and timeseries-based contributions dataset. A knowledge graph generator generates a timeseries-based knowledge graph from gathered information. An automated planning service determines an associated value of the monitored project and a remuneration service analyzes the contributions dataset to determine appropriate apportionment of remuneration.

Abstract: A system for detecting and mitigating attacks using forged authentication objects within a domain is provided, comprising an authentication object inspector configured to observe a new authentication object generated by an identity provider, and retrieve the new authentication object; and a hashing engine configured to retrieve the new authentication object from the authentication object inspector, calculate a cryptographic hash for the new authentication object, and store the cryptographic hash for the new authentication object in a data store; wherein subsequent access requests accompanied by authentication objects are validated by comparing hashes for each authentication object to previous generated hashes.

Abstract: Improving a distributed model with distributed data receives an instance of the distributed model from the network-connected computing system, create a cleansed dataset from data stored in the memory with at least biases within the data stored in memory corrected, train the instance of the distributed model with the cleansed dataset, and generate an update report based at least in part by updates to the instance of the distributed model.

Abstract: A system for repeatable and flexible predictive analysis of very large data sets using a distributed computational graph using a domain specific language for pipeline and resource declaration has been developed. Data receipt software receives data from one or more sources. In a declared data pathway, data formalization software formats input data for storage, enrichment, or continued processing. An event analysis server inspects stored data for trends, situations, or knowledge. Aggregated data is passed to event message store and data stream handler software. Transformation pipeline software stores, triggers, executes and monitors declared transformation steps and pipelines to manipulate and act on bulk data and data streams, provides results and enables dynamic model and routine re-training and learning.

Abstract: Detection and mitigation of data source compromises in an adversarial information environment, featuring the ability to scan for, ingest and process, and then use relational, wide column, and graph stores for capturing entity data, their relationships, and actions associated with them. Metadata is gathered and linked to the ingested data, which provides a broader contextual view of the environment leading up to and during an event of interest. Data quality analysis is conducted as data is ingested in order to identify if a data source may be compromised. The results are used to manage the reputation of the contributing data sources.