Abstract: Systems and methods are disclosed for detecting covert DNS tunnels using n-grams. The majority of legitimate DNS requests originate from network content itself, for example, through hyperlinks in websites. So, comparing data from incoming network communications to a hostname included in a DNS request can give an indication on whether the DNS request is a legitimate request or associated with a covert DNS tunnel. This process can be made computationally efficient by extracting n-grams from incoming network content and storing the n-grams in an efficient data structure, such as a Bloom filter. The stored n-grams are compared with n-grams extracted from outgoing DNS requests. If n-grams from an outgoing DNS request are not found in the data structure, the domain associated with the DNS request is determined to be associated with a suspected covert DNS tunnel.

Abstract: A reconfigurable aperture includes a plurality of metallic particles confined to a volume extending across an aperture area. The metallic particles are repositioned within the volume to form opaque regions in the aperture area. The opaque regions, and transmissive regions between the opaque regions, can form a reconfigurable zone plate that can change the collimation of a microwave beam via diffraction therethrough. The zone plate can be located a fixed distance away from a microwave source and a detector in a housing, so that for any specified wavelength produced by the microwave source, the zone plate can reconfigure to have a focal length equal to the fixed distance. The reconfigurable zone plate can effectively collimate microwaves produced by the microwave source, can direct the collimated microwaves in a specified direction, can receive microwaves returning along the specified direction, and can focus the received microwaves onto the detector.

Abstract: A method for range finding of a target including: generating a first photon and a second photon identical to the first photon; transmitting the first photon towards the target and delaying the second photon by a time delay; receiving the first photon reflected from the target and the delayed second photon; interacting the reflected first photon and the delayed second photon to produce HOM interference; detecting photo-statistics at an output of the HOM interference; when the two photons are output at the same output port, repeating the above processes; when the reflected first single photon and the delayed second single photon are output at different output ports, changing the time delay and repeating the above processes; repeating the above processes for a number of times to arrive at a final estimate for a value of the time delay corresponding to the final estimate of the target range.

Abstract: A method for detecting foreign code injected into a computer system including a processor and memory, the processor being configured to execute instructions stored in the memory, includes: detecting, on the computer system, an illegal instruction error; recording the illegal instruction error; determining whether a threshold condition is met; and generating an alert if the threshold condition is met.

Abstract: A body garment including sensors distributed throughout the garment, each sensor senses body state information from a local surface area of a body; and sensor nodes in proximity to the plurality of sensors, each sensor node including a processor to receive sensing body state information from at least one of the plurality of sensors. Each processor is configured to receive body state information locally from sensors, to utilize the information to determine a local surface shape of the surface of a portion of the body part; and to exchange local surface shape information with neighboring sensor nodes. At least one processor of utilizes the local surface shape information received from the sensor nodes to generate one overall model of a surface shape of the entire surface of the body part covered by the garment.

Abstract: Embodiments of a wideband interference mitigation (IM) system with negative group delay (NGD) compensation and method for wideband interference cancellation are generally described herein. In some embodiments, the wideband IM system may include first frequency-selective circuitry to capture interfering signals within a bandwidth of interest from a primary signal path after removal of a desired signal, cancellation circuitry to implement a negative group delay (NGD) on output signals from the first frequency-selective circuitry to generate negative group-delayed signals, and second frequency-selective circuitry to generate interference cancellation signals from the negative group-delayed signals for combining with signals from the primary signal path.

Abstract: A computationally efficient approach to determining inner products between feature vectors is provided that eliminates or reduces the need for multiplication, and more specifically, provides an efficient and accurate basis selection for techniques such as Orthogonal Matching Pursuit.

Abstract: A method and apparatus is disclosed for increasing the security of computer networks through the use of an Intrusion and Misuse Deterrence System (IMDS) operating on the network. The IMDS is a system that creates a synthetic network complete with synthetic hosts and routers. It is comprised of a network server with associated application software that appears to be a legitimate portion of a real network to a network intruder. The IMDS consequently invites inquiry and entices the intruder away from the real network. Simulated services are configured to appear to be running on virtual clients with globally unique, class “C” IP addresses. Since there are no legitimate users of the virtual network simulated by the IMDS, all such activity must be inappropriate and can be treated as such. Consequently, the entire set of transactions by an intruder can be collected and identified rather than just those transactions that meet a predefined attack profile.

Abstract: Systems, apparatus, and methods for displaying volumetric data using motion-based visualization techniques are provided. An apparatus storing computer executable instructions to be executed by a processor, causing the processor to carryout out a method for displaying data with multiple graphical features visually representing portions of the data and to impart motion to a graphical feature relative to a remainder of the volumetric image to highlight the first graphical feature is provided. A method for displaying a volumetric image in which motion is used to highlight a graphical feature visually representing a portion of the volumetric image relative to the remainder of the image is provided.

Abstract: Embodiments of a system and method for generating a shaped cyclic time-domain waveform are generally described herein. In some embodiments, a first transform may be performed on an input symbol vector to generate a transformed input vector in a transform domain. The transformed input symbol vector may be expanded to generate an expanded symbol vector. At least some elements of the expanded symbol vector may be weighted with a weighting vector selected for pulse shaping to generate a weighted symbol vector. A second transform may be performed on the weighted symbol vector to generate an output symbol vector for subsequent processing and transmission. The second transform may be an inverse of the first transform and may comprise a greater number of points than the first transform.

Abstract: Embodiments of a system and method for computer inspection of information objects, for example, executable software applications for common components that may include elements of computer viruses, items from hacker exploit libraries, or other malware components. Information objects may contain identified sequences of instructions, each of which may be identified and hierarchically grouped based on their structural relationship(s). In the software context, programming languages may include multiple components that include functional code; these components are often shared between programmers. In some embodiments, an inspection of the hierarchical relationship of components (e.g., constituent functions) in the information objects may allow for identification of common components shared between programs. In some embodiments, authorship of objects or components in the objects may be identified by comparisons between component samples.

Abstract: Embodiments of a non-contiguous spectral-band modulator and method for non-contiguous spectral-band modulation are generally described herein. In some embodiments, an input symbol tuple may be mapped to a sequence of phase values. Each value of the sequence of phase values may represent an instantaneous frequency of a waveform for a signal with a power spectral density that is substantially constrained to the two or more subbands of a non-contiguous spectrum. The values of the sequence of phase values may be accumulated and a phase-sample sequence representing phase samples of a transmit waveform may be generated. An exponentiation may be performed on the phase-sample sequence to generate a constant modulus signal sequence. An output signal sequence is generated that is constrained to a region in the complex plane, such as an annulus, when the signal is in a subband. The output signal sequence may be shaped to constrain spectral energy during transitions between subbands.

Abstract: The systems and methods of the invention modulate atmospheric gases to temporarily increase the amount of atmospheric particles in the path of the debris, in order to decelerate the debris and accelerate natural orbital decay to the point of atmospheric re-entry. In one aspect of the invention, clearing the space debris includes propelling a plume of atmospheric gases substantially orthogonal to the path of the debris such that the debris collides with the gaseous plume as it passes through the plume. Increased atmospheric drag from the gaseous particles of the plume in the path of the debris obstructs a forward propagation of the debris and gradually decelerates the debris, leading eventually to atmospheric recapture.

Abstract: A system monitors performance in a network that includes several network resources. The system obtains a list of targets in the network. The targets include selected ones of the resources. The system sends a request to the targets, receives responses from the targets, and determines a status of the targets based on the received responses or a lack of responses from the targets. The system then analyzes the status of the targets to determine compliance with the service-level guarantee.

Abstract: According to one aspect, embodiments of the invention provide a node comprising a processor, a memory including a predefined mapping, the predefined mapping correlating network characteristics to related critical thresholds at which a delivery ratio of the node is close to a maximum level and at which a total number of transmissions by the node is close to a minimum number necessary to achieve the delivery ratio, and a component configured to communicate with one-hop neighbors of the node and configured to determine at least one characteristic of a dynamic network based on information received from the one-hop neighbors of the node, wherein, in reference to the predefined mapping, the processor is configured to identify a critical threshold associated with the at least one characteristic of the network and is configured to transmit a first packet to at least one one-hop neighbor based on the critical threshold.

Abstract: Systems and methods that, among other things, analyze and monitor the performance of a call center including performance of the interactive voice response (IVR) systems, call center agents, and other components of the call center. The systems and methods record characteristics of the call such as the audio data, and analyze that record to identify the events and the actions that take place during the call. A call center administrator may also identify a set of metrics, such as the number of dropped calls that occur during a day that may be monitored by the systems described herein. The data collected about these events and the resulting metrics may be stored in a database and provided to a call center administrator through a user interface that allows the administrator to browse through the collected metric and recorded call data and directly review relevant portions of a call.

Abstract: An electro-optical system for exchanging quantum information between optical qubits and including a superconductive microwave cavity; an electro-optical material: a superconductive qubit circuit formed on the electro-optical material including a superconductive qubit; a dipole antenna, formed on the electro-optical material for directly coupling the superconductive qubit to the superconductive microwave cavity; an optical input for receiving input optical photons; a microwave input for receiving input microwave photons; and an optical output for outputting modulated optical photons, wherein a frequency and a phase of the optical photon is modulated with a state of the superconducting qubit by the dipole antenna.

Abstract: Embodiments of a system and method for generating a shaped cyclic time-domain waveform are generally described herein. In some embodiments, a first transform may be performed on an input symbol vector to generate a transformed input vector in a transform domain. The transformed input symbol vector may be expanded to generate an expanded symbol vector. At least some elements of the expanded symbol vector may be weighted with a weighting vector selected for pulse shaping to generate a weighted symbol vector. A second transform may be performed on the weighted symbol vector to generate an output symbol vector for subsequent processing and transmission. The second transform may be an inverse of the first transform and may comprise a greater number of points than the first transform.

Abstract: Distributional information for a set of ? vectors is determined using a sparse basis selection approach to representing an input image or video. In some examples, this distributional information is used for a classification task.

Abstract: A method for distributing execution of a computer program to a plurality of hardware architectures of different types including: analyzing the computer program to identify a plurality of execution boundaries; selecting one or more execution boundaries from the plurality of execution boundaries; linking the computer program to the selected one or more execution boundaries; executing the computer program with linked execution boundaries; saving a hardware agnostic state of the execution of the computer program, when the execution encounters a boundary from the selected one or more execution boundaries; and transmitting the hardware agnostic state to a remote hardware architecture to be executed on the remote hardware architecture, responsive to the hardware agnostic state.