Abstract: Measurement data may be collected for a computing system, where the measurement data may correspond to leaf nodes in a tree that organizes the measurement data into a hierarchy of categories. A score associated with a first node in the tree may be calculated based on the measurement data and a set of weights, where each node in the tree may be associated with a weight in the set of weights, and where a score associated with a node in the tree may be based on scores associated with child nodes of the node. A first score corresponding to the computing system may be reported relative to other scores corresponding to other computing systems, where the other scores are computed based on other measurement data collected from other computing systems and the set of weights.

Abstract: Systems and techniques are described to facilitate using secure tokens for stateless software defined networking. An initial configuration may be created for deploying a network device at a deployment site. A cryptographically secure certificate may be created that includes the initial configuration for deploying the network device at the deployment site. The cryptographically secure certificate may be stored in a secure token that can be inserted into a secure token reader that is located at the deployment site and communicatively coupled to the device at the deployment site. The network device may then be configured at the deployment site by using the secure token.

Abstract: The disclosed embodiments provide a system that modifies execution of a target process in a computer system. During loading of a marker library by a target process, the system modifies import dependency data of the marker library to include an injection library as a dependency of a marker library. After the modified import dependency data is used to load the injection library into the target process by the operating system or loader, the system executes the injection library prior to execution of the marker library to revert the import dependency data to an original state and modify execution of the target process.

Abstract: Systems and techniques are described to detect and recover from ransomware infections. It may be determined if a ransomware attack is in progress based on analyzing read and write requests to a file system. Next, a mitigation action may be performed in response to determining that a ransomware attack is in progress.