Abstract: Provided are processes for suppressing jamming signals that may include use of a signal processing circuit. A signal processing circuit can be configured to obtain a jamming signal and a feedback signal, process the jamming signal and the feedback signal to determine a cancellation signal for use in suppressing the jamming signal, and output the cancellation signal to a radio-frequency transmitter. The signal processing circuit may be further configured to obtain a transmission signal, determine a jamming channel from the jamming signal and a feedback channel from the feedback signal, and combine the transmission channel, jamming channel, and feedback channel to determine a transfer function, where the transfer function is configured to determine the cancellation signal.

Abstract: There is set forth herein in on embodiment a method wherein configurations are changed. In one embodiment, configurations are changed in such a way that end-to-end requirements continue to be satisfied, the change is at minimum cost, and that at least one variable from a critical set of variables is changed.

Abstract: A method and system for providing privacy in a publish-subscribe protocol is provided. A server receives from a third party a topic-based key associated with a tree structure having a pseudonym of a topic as a root and at least one client as a leaf. The server encrypts a key associated with a conditional oblivious transfer protocol using the topic-based key. The server encrypts an item with the key associated with the conditional oblivious transfer protocol. The server transmits the encrypted key and the encrypted item to a plurality of clients. The encrypted item is decryptable by the at least one client with the key associated with the conditional oblivious transfer protocol when the key associated with the conditional oblivious transfer protocol is decryptable with an interest-based key associated with a tree structure having a pseudonym of an interest as a root and the at least one client as a leaf.

Abstract: In a vehicle communication network, some vehicles may be used by attackers to send false information to other vehicles which may jeopardize the safety of other vehicles. Vehicles should be able to detect malicious communications activities and to mitigate the impact of malicious vehicles by evicting (eliminating) suspected malicious vehicles from the system. Evicting a vehicle is to ignore the messages sent from the vehicle for a specified time period. Voting and sacrifice principles are combined using a mathematical model based on the “Mafia Game”. The Mafia Game model focuses on the relative size of the group of attackers within a neighborhood necessary to dominate the entire network in the neighborhood (i.e., to eventually evict all the innocent vehicles).

Abstract: A system and method is provided for verifying an access-control policy against a particular constraint for a multi-step operation. In disclosed embodiments, the method includes expressing the access-control policy as a first quantifier-free form (QFF) constraint and identifying the particular constraint as a second QFF constraint. The method also includes identifying an operation vector and providing copies of the operation vector associated with steps in the multi-step operation. The method also includes determining a third QFF constraint using the first QFF constraint, the second QFF constraint, and the copies of the operation vector. The method also includes solving the third QFF constraint to determine a solution and outputting a result of the solving.

Abstract: A system and method is provided for verifying an access-control policy against a particular constraint for a multi-step operation. In disclosed embodiments, the method includes expressing the access-control policy as a first quantifier-free form (QFF) constraint and identifying the particular constraint as a second QFF constraint. The method also includes identifying an operation vector and providing copies of the operation vector associated with steps in the multi-step operation. The method also includes determining a third QFF constraint using the first QFF constraint, the second QFF constraint, and the copies of the operation vector. The method also includes solving the third QFF constraint to determine a solution and outputting a result of the solving.

Abstract: A method for solving the reconfiguration planning problem transforms the requirement that an invariant is always preserved into a constraint on the times at which the configuration parameters change. The method then solves this constraint to obtain the required reconfiguration plan. When this constraint is strengthened with a synthesis constraint, it is ensured that any final configuration that is computed is also reachable. An extension of the method allows parameters to take on multiple intermediate values.

Abstract: Multimode light detectors are provided, which combine a plurality of measurements of light to detect information, using a mode transformation device. The light may be light from one or more objects, and the mode transformation device may be configured to transform the light into many single mode light beams. Each measurement of the light may be a measurement of a corresponding single mode light beam. The multimode detectors may include one or more optical receivers, configured to mix one or more single mode light beams with one or more local oscillators, respectively. Methods are provided for detecting information of objects, including obtaining light from the objects, transforming the light into multiple single mode light beams, and collecting (and/or combining) measurements of the single mode light beams.

Abstract: A system, a network node, a router, a method and a program used to determine a bottleneck bandwidth on a multi-hop path between a source and destination node is presented. The method comprises receiving probe packets by a first hop node in the multi-hop path, measuring a bandwidth on a link between the first hop node and a next hop node in the multi-hop path, generating a bandwidth discovery packet including the measured bandwidth, transmitting the BDP to the next hop node, relaying the probe packets to the next hop node, and determining if the next hop node is a last-hop node on the multi-hop path. A last hop node records the measured bandwidth from the BDP, adjusts the delay between the probe packets based upon the bandwidth and relaying the probe packets to the destination node. The destination node determines the bottleneck bandwidth based on the delay between the probe packets.

Abstract: A multiple-input multiple-output (MIMO) system for demapping uses a single stream system of iterative passes in a preferred order using the latest soft-information for better interference cancellation and the minimum mean square error (MMSE) criterion.

Abstract: Changing a network configuration to restore compliance to one requirement may invalidate the network compliance with another requirement. A method changes a configuration to restore compliance to all requirements at minimum cost. The requirements are a hybrid of symbolic, arithmetic and bit-vector constraints, so traditional optimization techniques such as linear programming, that work only for purely arithmetic constraints, do not apply. The requirements are represented as SMT (satisfiability-modulo-theory) constraints on configuration variables, and then a weighted Max-SAT solver is used to compute the optimal configuration changes in order to minimize the cost.

Abstract: Aspects of the invention pertain to analyzing and modifying access control lists that are used in computer networks. Access control lists may have many individual entries that indicate whether information can be passed between certain devices in a computer network. The access control lists may include redundant or conflicting entries. An aspect of the invention converts an order-dependent control list into an order-free equivalent. Redundant entries are identified and removed without adversely affecting the access control list. Redundancy may be identified by evaluating the volume contraction ratio, which is the ratio of the volume of spin-off entries to specific original entry in the access control list. This ratio reflects the extent of order-dependent impact on that entry in a given access control list.

Abstract: A three-way handshake method for optical messaging in a multi-domain optical network that includes a first pass from a source domain to a destination domain through intermediate domains on candidate working paths, collecting information identifying available routing resources for each working path, calculating a working path metric and storing each of the metrics at the respective border node, determining a path key of the topology of each domain working path and using the path key to identify the path outside its domain and determining the best working paths and border nodes to use. A second pass using the path keys for identifying the working path in each domain and reserving the identified routing resources and selecting which routing resources to use. A third pass identifying the selected routing resources and establishing an optical signaling message path between the source node and the destination node.

Abstract: A method for optical network signaling processing of a signal from a first node to an end node through intermediate nodes is presented. The method comprises determining, in a first pass from the first node to the end node, available wavelengths and wavelength conversion at each node, the end node optimizing wavelengths using the available wavelengths and wavelength conversions, at each node, dropping a cross-connect command, in a second pass from the end node to the first node, choosing wavelengths for connection based on the optimizing step, in a third pass from the first node to the end node, receiving at each node a signal message and releasing unused cross-connect commands, the end node identifying the chosen wavelengths and releasing the unused resources, and transmitting the signal on the chosen wavelengths. Restoration paths can also be determined. Optimizing can include selecting and marking one or more backup wavelengths.

Abstract: A method is provided for analyzing the semantic content of network configuration files, comprising the steps of accessing configuration files associated with corresponding network components, the files containing commands that define the configuration of those components; transforming the commands into a structural database based, at least in part, on a non-grammatical analysis of the commands, wherein the structure of the commands is represented as the structural database; and constructing a semantic database of the configuration files by querying the structural database.

Abstract: A system and method is provided for a source for a heralded single photon comprising a correlated photon-pair generator that provides bursts of multiple photon pairs that may be odd or even in number of pairs, one of each pair having a first but not a second characteristic and the other of each pair having the second but not the first characteristic; a first optical path for photons of pairs having the first characteristic; a second optical path for photons of pairs having the second characteristic; a two-photon absorber in the first optical path that, for each burst of photons, reduces the number of first characteristic photons in the first path to zero or one, depending on whether the number of photon pairs in the burst is even or odd; a photon detector in the second path having a heralding signal output to indicate when the number of photons in the burst is odd; and an optical switch coupled to the output of the second optical path and connected to operate in response to the heralding signal.

Abstract: An adapter, and a method of using the adapter, for an electric meter, which includes a set of connections for interfacing to a panel box, a set of connectors for interfacing to the electric meter; and circuitry for intercepting FAN or HAN traffic, injecting FAN or HAN traffic and communicating intercepted traffic and local information from the electric meter and sensors over a network to a management entity that collects and process the data. Data from environmental, electric quality, and usage sensors are supplied to the network. External commands, originating in a management entity or with a customer are provided from the network.

Abstract: A computer-enabled method of learning the behavior of a program. A processor can execute a target program during a learning interval while varying a plurality of stimuli provided to the target program so as to produce a multiplicity of different sequences of events which differ in combinations of types of events in respective sequences, orders in which the types of events occur in respective sequences, or in the combinations and in the orders in which the types of events occur. The multiplicity of event sequences can be recorded, and a second program can be executed by a processor to: determine a plurality of clusters based on similarities between the event sequences in their entirety; and determine a plurality of signatures corresponding to the plurality of clusters. Each signature can be the longest common subsequence of all sequences in the respective cluster and thus representative of the cluster.

Abstract: A system and method for measurement of the performance of a network by simulation, wherein time divergence is addressed by using discrete event simulation time to control and synchronize time advance or time slow down on virtual machines for large-scale hybrid network emulation, particularly where the loss of fidelity could otherwise be substantial. A dynamic time control and synchronization mechanism is implemented in a hypervisor clock control module on each test bed machine, which enables tight control of virtual machine time using time information from the simulation. A simulator state introspection and control module, running alongside the simulator, enables extraction of time information from the simulation and control of simulation time, which is supplied to the virtual machines. This is accomplished with a small footprint and low overhead.