Abstract: Embodiments provide a sensitive data protection system for protecting sensitive data by augmenting one or more computer program portions to secure sensitive data associated with the one or more computer program portions. Embodiments include parsing one or more computer program code portions to identify one or more sensitive data portions, where the one or more sensitive data portions are associated with one or more respective sensitive data categories. Embodiments also include transforming the one or more computer program code portions into one or more respective secured data types such that the one or more sensitive data portions associated with the one or more respective secured data types are secured against unauthorized access by one or more third-party computer applications, web applications, services, end users, enterprises, and/or other third-party entities.

Abstract: Disclosed are a method and apparatus for packet forwarding and an electronic device, which relate to the field of communication technology.

Abstract: Described is a method performed by a computing device for controlling home network system associated with a plurality of Wi-Fi communicating devices, the method comprising: analyzing operational data associated with the plurality of Wi-Fi communicating devices, the operational data collected from plurality of Wi-Fi communicating devices; providing (or generating) recommendations for improving performance of the home network system according to the analyzed operational data; correlating the recommendations into groups; and aggregating the recommendations from the groups to generate unified recommendations for improving the home network system.

Abstract: An electronic device, computer program product, and method autonomously updates/modifies device features and/or settings for use in a new location having specific requirements for device usage. The device processor executes code to: determine that a user of the electronic device will be travelling from a first location having the first set of location specific requirements to a second location having a second set of location specific requirements; and identify the second set of location specific requirements corresponding to the second location. In response to at least one of a time trigger or a location trigger corresponding to the electronic device being moved to the second location, the processor autonomously modifies one or more device features associated with the second set of location specific requirements to enable the electronic device to operate according to the second set of location specific requirements while the electronic device is in the second location.

Abstract: Various embodiments disclose a method comprising, receiving, by a computing device, a first message for transmission to an endpoint from a messaging queue; determining, by the computing device, a first network to which the endpoint is connected; creating, by the computing device, an endpoint object corresponding to the endpoint, the endpoint object being configured with network specific information associated with the first network; receiving, by the endpoint object executing on the computing device from a subnetwork object executing on the computing device, an indication that the message can be delivered to the endpoint via the first network; and in response to the indication, transmitting, by the endpoint object, the first message to the endpoint using the first network.

Abstract: Methods, systems, and apparatuses, including computer programs encoded on computer storage media, for generating a data structure that includes entity information and casing information associated with the entity across one or more enterprise team servers. The data structure is then used to determine a corrective action, which is subsequently performed. Because of how the described techniques generate the data structure and determine a corrective action, the described techniques can enhance threat detection, improve risk assessment, and increase incident resolution throughput of a networked system. The data structure may be provided for use in performing a downstream task, wherein the downstream task comprises using a machine learning model to process the data structure.

Abstract: To generate an encrypted packet, a transmitting endpoint in a communication system chooses the desired IPsec tunnel, then retrieves the SA linked to that tunnel from its Outbound SA table of its local SA database (SAD), and encrypts the packet using the retrieved SA. To decrypt the encrypted packet, the receiving endpoint extracts the Security Parameter Index (SPI) value, the source address, the destination address, and the source port number from the packet to retrieve the appropriate SA from its local SAD database and decrypts the encrypted packet using the retrieved SA. In this way, the transmitting and receiving endpoints can retrieve the appropriate SAs for situations in which either endpoint is one of multiple endpoints located behind a Carrier-Grade Network Address Translation (CG-NAT) function having a single public IP address shared by the multiple endpoints.

Abstract: Systems, methods, and devices that relate to an inspection system deployed in a core network. The inspection system includes one or more inspection agent nodes located close to an edge of the core network configured to generate one or more network reports based on information from one or more access nodes. An inspection manager node is in communication with the one or more inspection agent nodes to receive one or more network reports from the one or more inspection agent nodes, derive an actual network behavior of the one or more access nodes based on the one or more network reports, detect a discrepancy between an expected network behavior and the actual network behavior, and trigger a reconfiguration of at least one of the one or more access nodes based on the discrepancy.

Abstract: A high assurance system provides for communication between trusted user devices with auxiliary adaptation for augmenting communication security across an untrusted environment. First and second main encrypting devices coupled to respective trusted user devices are cryptologically tethered to one another by a main communication link established across the untrusted environment between trusted user devices in cryptologically protected manner. An auxiliary encrypting device is cryptologically tethered to the first main encrypting device by an auxiliary communication link established across the untrusted environment between a trusted auxiliary device and one trusted user device in cryptologically protected manner. The main and auxiliary encrypting devices define portals traverse trust boundaries between trusted and untrusted environments, each including at least one encryption unit and a communication unit coupled thereto by a connectionless interconnect.

Abstract: In various examples, a computerized method for document-sharing conferencing is described. The method may include steps such as acquiring and saving an electronic document. The method may include receiving an active event indication and instructing the electronic document to be displayed on one or more displays during an active event. The method may further include receiving an active layer for the electronic document and instructing the active layer to be displayed on the electronic document during the active event. The method may also include saving the active layer with the electronic document.

Abstract: A memory system includes a first storage; a second storage storing log information indicating a history of accesses to the first storage; a third storage storing a first private key and a first public key; and a processor configured to convert the log information into a first hash value by inputting the log information into a hash function, sign the first hash value using the first private key, and generate a first signature. The processor is further configured to convert the log information read from the second storage into a second hash value by inputting the log information into the hash function; and perform signature verification using the first public key paired with the first private key and the second hash value.

Abstract: Disclosed are systems and methods for improving interactions with and between computers in content searching, hosting and/or providing systems supported by or configured with devices, servers and/or platforms. The disclosed systems and methods for efficiently monitoring and following up on delivered messages for which a user expects and/or requires a reply. The disclosed functionality provides a fully automated, personalized, easy and efficient way to identify and manage outgoing mail messages that require reply by marking outbound messages as RSVP messages, which are those messages determined to require a reply. Such functionality is based on the ability of the disclosed framework to distinguish between a “satisfactory response” (i.e., a response that includes the required information) and a response that is not.

Abstract: A system and method for defense in depth, which employs a feedforward orchestrator, of at least one software delivery pipeline includes a security context and the feedforward orchestrator being configured to analyze the security context for each stage of the software delivery pipeline to mitigate security vulnerabilities. The system and method also implement security controls with at least one feedforward technique. Also, the feedforward orchestrator continuously employs feedback of the system to inform subsequent stages or subsequent layers of integration and deployment functions of the at least one software delivery pipeline.

Abstract: In various examples, a computerized method for document-sharing conferencing is described. The method may include steps such as acquiring and saving an electronic document. The method may include receiving an active event indication and instructing the electronic document to be displayed on one or more displays during an active event. The method may further include receiving an active layer for the electronic document and instructing the active layer to be displayed on the electronic document during the active event. The method may also include saving the active layer with the electronic document.

Abstract: A system and method for generating an application layer for a representation graph is disclosed. The method includes defining a data entity in a representation graph, the data entity including a plurality of data fields; generating a node based on the data entity in the representation graph, the node representing a unique entity; receiving data respective of the unique entity from a plurality of data sources, such that a first data source of the plurality of data sources provides data to a first data field of the plurality of data fields, and a second data source of the plurality of data sources provides data to a second data field of the plurality of data fields; applying a control to the node based on the received data; and initiating an action based on applying the control to the received data.

Abstract: Obfuscation techniques used in phishing attacks that evade detection using current machine learning models can be identified and statistically characterized for use in generating adversarial training samples to improve the performance of a machine learning model phishing classifier. By using statistical information regarding the prevalence and effectiveness of various obfuscation techniques observed in real-world samples, adversarial samples that are effective and realistic examples of phishing content that evades phishing content classifier detection can be generated and used to augment the data set used for training or re-training the machine learning model classifier.

Abstract: A media docking device includes an input circuit, an output circuit and a processing circuit. The input circuit is electrically connected to a media source device for receiving media data. The output circuit is electrically connected to a media play device. The processing circuit is electrically connected to the input circuit and the output circuit. The processing circuit determines if a verification procedure is passed. If the verification procedure is passed, the processing circuit transfers the media data to the media play device. If the verification procedure is not passed, the processing circuit limits a transmission of the media data, such that the media data will not be completely played by the media play device.

Abstract: Some embodiments address technical challenges arising from efforts to identify and mitigate security risks, in particular but not only, risks that sensitive data will be exfiltrated. Some embodiments provide or utilize an anomaly detector which is configured to detect a security anomaly in data based on at least a distribution of sensitive information type documents in a collection of documents and classifications of documents by trainable classifiers based on machine learning. Some embodiments provide or utilize a security policy generator which is configured to proactively and automatically generate security policy recommendations, rank at least two of the security policy recommendations, and present at least one top-ranked generated security policy recommendation in a user interface. Some embodiments generate a security policy in a managed computing system based on at least an anomaly score, and then configure the managed computing system according to the generated security policy.

Abstract: Aspects of the subject disclosure may include, for example, obtaining first network performance data characterizing a wireless network, wherein the wireless network provides one or more users of a plurality of users access to a collection of servers that enable a plurality of services; obtaining second network performance data characterizing a wired network, wherein the wired network provides the one or more users access to the collection of servers that enable the plurality of services; obtaining first service performance data characterizing a first service of the plurality of services that are enabled by the collection of servers; obtaining first service requirements of the first service; and responsive to a first user of the one or more users indicating a preference to utilize the first service, selecting one of the wireless network or the wired network as a selected network for the first user, wherein the selecting of the selected network is based upon the first network performance data, the second networ

Abstract: It is provided a method comprising: receiving one or more received data sets, wherein each of the received data sets comprises data each representing a value of a respective status parameter of a system, and at least one of the data sets comprises a respective value quality score representing a quality of the value of the respective status parameter: calculating, by a cognitive function, an optimal configuration range set and a confidence score of the optimal configuration range set based on the one or more received data sets; providing the calculated optimal configuration range set and the confidence score to a controller.