Abstract: A security architecture system includes a plurality of subsystems. The plurality of subsystems include a secure element subsystem. A first subsystem of the plurality of subsystems includes a trusted computing platform that has a trusted platform control module. The first subsystem is configured to, for a running object in one or more subsystems other than the first subsystem in the plurality of subsystems, use the trusted platform control module to perform security measurement on the running object based on a measurement strategy and a measurement benchmark value to obtain a measurement result. The measurement result is used to control a running state of the running object in one or more subsystems other than the first subsystem in the plurality of subsystems.

Abstract: Techniques for securing client watermarks are described herein. In accordance with various embodiments, a server receives a request from a client device for authorizing rendering a media content item at the client device. A validation engine on the server obtains at least a portion of an image representing a screen capture of rendering the media content item including a client watermark and/or metadata associated with the rendering. The validation engine then validates the watermark based at least in part on at least the portion of the image and/or the metadata. Having invalidated the client watermark, the server causes disruption of rendering the media content item at the client device. On the client side, a watermark engine captures the image of rendering the media content item including the client watermark and requests the server to validate the client watermark and renew the authorization based on the validation.

Abstract: There is provided a method performed by a user plane core network function for a wireless communication network. The user plane core network function is configured with a range of Internet Protocol addresses for allocation to user equipments. The method comprises: transmitting a message to a control plane core network function, the message comprising an indication of a usage level of the range of IP addresses.

Abstract: Systems and methods are provided for managing capabilities of workspaces operating on an Information Handling System (IHS). A request is received from a user of the IHS for access to a protected resource. A security context and a productivity context are determined for operation of a primary workspace on the IHS. Two or more applications are identified for operation within the primary workspace, where the applications provide access to the protected resource, and where the applications include overlapping capabilities. Based on the security context and the productivity context for the primary workspace deployment, two or more of the applications with overlapping capabilities are selected for operation within the primary workspace.

Abstract: A method of generating a calibration factor is described. In an example, the method may include establishing a wireless communication connection with a fitness machine. The method may also include obtaining first machine data from the fitness machine. The first machine data may specify a type of the fitness machine. The method may also include initiating a workout session on the wearable computer based on the first machine data. During the workout session, the method may also include obtaining sensor data, obtaining second machine data, and determining the calibration factor based on the second machine data and the sensor data. The method may also include generating a workout session summary based on the calibration factor.

Abstract: Disclosed herein are system, method, and computer program product embodiments for differentiated authorization for domains of a multi-domain application. A computing device may identify a familiarity indicator based on identity information received with a request for access to a multi-domain application. Based on a risk assessment of the familiarity indicator, an access level for the access to the multi-domain application may be identified. A request for an access token that enables access to a first domain of the multi-domain application may be authorized based on the access level. A request for an access token that enables access to a second domain, such as a domain associated with a higher access level than the first domain of the multi-domain application, may be denied based on the access level.

Abstract: Various examples of systems and methods are described herein in which multiple intelligent electronic devices (IEDs) are connected in a network. A software-defined network (SDN) controller may include a rule subsystem, a test mode subsystem, a packet inspection subsystem, and a validation subsystem. The rule subsystem may define a plurality of flow rules. A test mode subsystem may operate the SDN in a testing mode. A packet insertion subsystem may insert test packets within the SDN while the SDN is in the testing mode. The validation subsystem may validate or fail each flow rule depending on how the various test packets are handled.

Abstract: Disclosed are methods, systems, and apparatus for remote reprogramming of an automotive controller and determining and reporting vehicle carbon emissions using a local device, a client device, a technician device and a system server. The local device is connected to the automotive controller and is wirelessly connected to the client device. The client device is connected to the technician device through a system server. Programming configurations, including firmware, settings, and parameter updates, are selected from a technician device, sent to the system server, and uploaded to local device using J2534 communication protocol. The client device receives the fuel consumption data from the local device and sends the data to the system server. The system server determines the carbon emissions based on the fuel consumption and reports the emissions to a third-party to certify carbon offset.

Abstract: A data sharing method includes that a first network element receives a user data policy from a terminal device. The first network element obtains user information of the terminal device according to the user data policy. The first network element sends the user information of the terminal device to a second network element according to the user data policy.

Abstract: Techniques are disclosed to detect, isolate, and/or mitigate an attack on a file system, for example, by malicious software, human actors, and/or compromised Internet-connected devices (bots). A processor of a data processing system detects an abnormal file system access pattern to a file system by applying statistical process control to network layer packets. Based on detecting the abnormal file system access pattern, the processor temporarily suspends file system access by at least one user ID contributing to the abnormal file system access pattern. The processor provides a notification identifying one or more file system object accessed in the abnormal file system access pattern.

Abstract: In one embodiment, a service tracks performance of a machine learning model over time. The machine learning model is used to monitor one or more computer networks based on data collected from the one or more computer networks. The service also tracks performance metrics associated with training of the machine learning model. The service determines that a degradation of the performance of the machine learning model is anomalous, based on the tracked performance of the machine learning model and performance metrics associated with training of the model. The service initiates a corrective measure for the degradation of the performance, in response to determining that the degradation of the performance is anomalous.

Abstract: The invention relates to method and system for patching websites running in a .NET framework environment. The method includes initiating second domain when website hosted on web-server is loaded for first-time. The website includes set of .NET modules, and one or more of the set of .NET modules are of interest. The method further includes creating patched method corresponding to each of the one or more of the set of .NET modules in the second domain by inserting preconfigured tracking code that calls the .NET module in the website via reflection. The method further includes calling, in real-time, the patched method in the second domain upon encountering the corresponding .NET module; monitoring, in real-time, behaviour of the patched method in the second domain; generating notification when the website is unloaded. The second domain is updated with information corresponding to unavailability of the unloaded website upon generating the notification.

Abstract: Methods, apparatus, systems, and articles of manufacture to generate reference signature assets from meter signatures are disclosed. Example apparatus disclosed herein include a signature comparator to compare meter signature strings with search signature strings to identify a first fragment match result, which is associated with a sequence position within a first media represented by the search signature strings included in the first fragment match result, and which is also associated with a length of the first media. Disclosed example apparatus also include candidate signature asset generation circuitry to generate a candidate signature asset from a meter signature sequence based on the sequence position and the length of the first media, and store the candidate signature asset in a candidate pool associated with the first media.

Abstract: Disclosed embodiments are directed at systems, methods, and architecture for operating a control plan of a microservices application. The control plane corresponds with data plane proxies associated with each of a plurality of APIs that make up the microservices application. The communication between the data plane proxies and the control plane enables automatic detection of service groups of APIs and automatic repair of application performance in real-time in response to degrading service node conditions.

Abstract: An electronic device includes at least one processor and at least one memory storing instructions executable by the at least one processor. The at least one processor operates to obtain a credential value string indicating a sequence of credential values entered by a user through a user interface as a part of a credential key. The at least one processor operates to obtain an input order string indicating an order in which individual ones of the sequence of credential values were separately entered by the user through the user interface as another part of the credential key. The at least one processor operates to validate the credential key based on the credential value string and based on the input order string.

Abstract: Systems and methods may provide location-based security using multi-point cryptography. The method may include receiving, by a controller, an original message for secure delivery to a mobile terminal. The method may also include generating, by the controller, a plurality of messages to be delivered to the mobile terminal using geographic diversity. The method may further include sending, by the controller, the plurality of messages to geographically diverse transmitters for transmission to the mobile terminal.

Abstract: The disclosure provides methods, apparatus and computer-readable media for subscribing to, and receiving event notification messages from a CAPIF core function. In one method performed by a subscribing network entity, the subscribing network entity sends an event subscription request message to the CAPIF core function. The event subscription request message comprises an indication of an event filter to be utilized by the CAPIF core function for filtering event notifications to be sent to the subscribing network entity. The event filter comprises an identity of one or more network entities associated with events to be notified to the subscribing network entity.

Abstract: A method of orchestrating measurements in a measurement system includes configuring a first service with a first configuration for acquiring measurement data by an orchestrator. The method also includes receiving a moniker generated by the first service in response to being configured that represents the first configuration. The moniker includes a location of the first service and an identifier of the first configuration. The method also includes transferring the moniker to a second service configured to establish communication with the first service based on the location, consume the measurement data acquired by the first service using the first configuration and transmitted in response to receiving the identifier from the second service, and generate a result in response to receiving the measurement data from the first service. The method further includes receiving the result from the second service.

Abstract: A method allowing execution of transmission functions hosted in intermediate pieces of equipment of a path established between two pieces of communication equipment. End-to-end encryption systems are designed to resist any surveillance or tampering attempt, as no third party can decrypt or modify the communicated data. There is a solution which, depending on the connection opening requests of the applications, allows to select and assemble the transport protocols necessary for the operation of the application. However, this method is local: this protocol stack is only assembled at the pieces of communication equipment constituting the ends of the connections. Consequently, the requests emitted by these applications are not transmitted to the intermediate pieces of equipment which host the desired functions.

Abstract: Systems and methods for establishing a primary multicast for media content and a supplemental multicast for dropped segments of the media content are provided. A primary multicast is used to transmit segments of media content to a plurality of devices. One or more of the devices can then act as a source of a supplemental multicast, to provide segments of the media content to other devices in the event those devices fail to properly receive a segment via the primary multicast.