Abstract: The objective of the present invention is to achieve both information security and user convenience in an information management system that manages information related to an automated analyzer, even if conditions of unauthorized use from a remote terminal occur. An information management system according to the present invention, upon detecting a communication disconnection or conditions of unauthorized use from a remote terminal, performs one or both of issuing a warning to an administrator or lowering the level of access rights, and enables access to at least a portion of the information even if the level of access rights is lowered.

Abstract: A system is provided for identification of security vulnerabilities using artificial intelligence-based analysis of computing environment logs. The system may analyze data logs associated with each of the endpoint devices associated with a software packet or service. Using an artificial intelligence engine, the system may identify the failure points of the software packet or service, which may result from outdated or nonfunctional code, incorrect parameter configuration, lack of computing resources, and/or the like. The system may further detect security issues associated with the software packet or service, such as a failure to mask or obfuscate sensitive data. Based the identified failure points, the system may generate recommended remediation processes to remediate the failure points. In this way, the system provides a way to remediate failure points in software using intelligent analysis of data logs.

Abstract: A system determines whether a first operation performed by an MLM is compatible with one of a first encryption scheme and a second encryption scheme, wherein the MLM is distributed over at least one client device and at least one server. In response to determining that the first operation is compatible with the first encryption scheme, the system: encrypts data associated with the first operation using the first encryption scheme; and transmits the data encrypted by the first encryption scheme to the at least one server configured to apply the first operation. In response to determining that the first operation is incompatible with the first encryption scheme, the system: encrypts the data associated with the first operation using the second encryption scheme; and transmits the data encrypted by the second encryption scheme to the at least one server configured to apply the first operation.

Abstract: Systems and methods for controlling network security within an industrial system. One method may include monitoring network traffic at a first industrial device of the industrial system. The method may include determining a first network security threat at the first industrial device using an artificial intelligence (AI) model trained to detect network security threats for the industrial system. The method may include controlling execution of a mitigation operation responsive to the network security threat.

Abstract: Context-aware security policies and incident identification, via automated cloud graph building with security overlays, are determined and performed by systems and platforms. Graph nodes, of a graph associated with a computing system, that represent resources associated with the computing system and entities associated with the computing system that have respective associations to the resources are generated. Security attributes are determined and assigned to the graph nodes that represent the entities and resources, and static and dynamic connections between the graph nodes are added to the graph. Additionally, possible connections in the graph between the graph nodes are added based on heuristic relational determinations of the graph nodes. From the graph, security incidents and kill chains are identified, context-aware security policies are generated and validated, and scopes and relationships of applications are identified. Accordingly, security actions are taken for the computing system.

Abstract: A secure control circuit protects data stored in a memory is provided. A setting circuit provides a first activation signal and protection information. The protection information points to a confidential area of the memory. A processing circuit provides a second activation signal and access information. An arbiter determination circuit determines whether the access information points to the confidential area according to the protection information in response to the first activation signal being in a first level. In response to the second activation signal not being in a specific level and the access information points to the confidential area, the arbiter determination circuit directs an access circuit to access the confidential area. In response to the second activation signal being in the specific level and the access information points to the confidential area, the arbiter determination circuit directs the access circuit to stop accessing the confidential area.

Abstract: Embodiments of the disclosure provide for improved Bluetooth communication security in vehicles. In the context of a method, the method includes obtaining, from a computing device, at least one feature of a communication specification for a vehicle, wherein: the communication specification defines data sharing protocols between a sensor or computing device aboard the vehicle and a vehicle management system to enable wireless communication by a Bluetooth communication mode without disabling means of the sensor, computing device, or vehicle management system for communication by a second mode. The method includes generating a vulnerability of the communication specification based on the at least one feature; determining a mitigation operation based on the vulnerability; and providing a recommendation comprising the mitigation operation to the at least one computing device to enable modification of the communication specification toward reducing the vulnerability.

Abstract: A peripheral sharing device for supporting secure copy-paste operations between hosts comprising: a plurality of copy-emulators and a plurality of paste emulators, configured cach to be connected to a copy-paste driver, wherein cach copy-paste driver is running on one of a plurality of hosts that are connected to the peripheral sharing device, and the copy-paste driver is configured to fetch or store clipboard objects from the clipboard of the corresponding host, a security bridge that is configured to securely pass clipboard objects between pairs of copy emulator and paste emulator.

Abstract: A method at a first communication device for providing a second communication device access to content, the method comprising: providing an offer to the second communication device, offering the second communication device conditional access to the content, wherein access to the content at the second communication device is adaptable based on sensor data of at least one of the first and the second communication device; acquiring sensor data of at least one of the first and the second communication device; providing the second communication device full access to the content in case it is that the sensor data of at least one of the first and the second communication device indicates that the second communication device shall be grated full access to the content, or determining that access to the content is to be restricted at the second communication device, and providing the second communication device restricted access to the content, in case it is determined that sensor data of at least one of the first and

Abstract: Various embodiments relate generally to data science and data analysis, computer software and systems, and computing architectures and data models configured to facilitate management and performance of enterprise functions, and, more specifically, to an enterprise computing and data processing platform configured to implement applications and computerized tools configured to facilitate implementation of an enterprise data model to generate and manage component data objects representing enterprise tasks and processes, as well as portions thereof, any of which may be used to create and modify an enterprise data flow or a process flow, for example, using an enterprise computerized tool. In some examples, a method includes activating one or more applications as computerized tools to access user account and enterprise function data, identifying permissions, and filtering access to logical components as a function of, for example, persona application data generated using a persona builder application.

Abstract: The embodiments of the disclosure disclose a method and system for cross-chain transfer of data based on decentralized identifiers. According to the disclosure, after receiving a data transfer transaction sent by a terminal of an original holder, a source chain reads a public key of the original holder in a corresponding first BID document according to a first BID carried by the data transfer transaction, and verifies a signature carried by the data transfer transaction. After the signature passes verification, the source chain initiates a cross-chain transaction. In response to the cross-chain transaction, a target chain deploys a second BID document in the target chain, and a public key of a new holder and data to be transferred are recorded in the second BID document. Further, the source chain replaces the public key of the original holder in the first BID document with the public key of the new holder.

Abstract: A system and method for monitoring and modifying the security configurations of multiple devices is disclosed. The method includes monitoring multiple devices for security triggers and taking action in response to the triggers. The triggers include changes in security configurations, known security issues and pending updates. The devices may be any connected devices, including Internet of Things devices.

Abstract: The present invention relates to servicing devices (10, 10?, 10?) requiring to be serviced. The devices (10, 10?, 10?) are included in a connected system (100). A respective operation right is assigned to each of the devices (10, 10?, 10?). An operation mode of each of the devices (10, 10?, 10?) depends on its assigned respective operation right. When a respective one of the devices (10, 10?, 10?) requiring to be serviced is serviced, an updated operation right is assigned at least to the respective device (10, 10?, 10?) in dependence of how the respective device (10, 10?, 10?) is serviced. Access to the device (10, 10?, 10?) for servicing it may be dependent on an authorization. A functionality of the serviced device (10, 10?, 10?) may be limited if an unauthorized user serviced the device (10, 10?, 10?).

Abstract: A computing device may include a memory storing a first dataset and a second dataset and a processor configured to provide an operating system. The computing device may also include a container defined by a programmed boundary within at least the memory and provided by the operating system. A resource executed within the container may access the first dataset without accessing the second dataset. However, the resource may access the second dataset in response to a generation of a certificate. The resource may originate from following a hyperlink in a communication.

Abstract: An artificially intelligent system for selection of user entitlements may be provided. The system may include a receiver that receives data elements. The system may include an artificially intelligent engine. The artificially intelligent engine may receive the data elements from the receiver and process and/or manipulate the data elements.

Abstract: Techniques for implementing intelligent querying of network-connected devices are disclosed. In some embodiments, a method comprises the following: identifying a set of unique identifiers corresponding to a set of devices connected to a network; obtaining information associated with a set of communications transmitted to or from a particular device in the set of devices based on the unique identifier corresponding to the particular device; identifying a device type for the unique identifier corresponding to the particular device based on the identified information associated with the set of communications; selecting a subset of a candidate set of queries based on the identified device type for the unique identifier; and executing the subset of the candidate set of queries on the particular device based on the selecting of the subset.

Abstract: In a trust framework that enables secure communication, a configurer establishes an initial set of potential trusted relationships between a client and one or more anchors associated with one or more hosts. Once configured, the client can use a trusted relationship to securely communicate with a host without reliance on trusted third parties.

Abstract: Provided is a system (100) to enhance Personal Identification Number (PIN) security with hidden factors (271, 272, 273, 274) comprises a client agent (111) and a server agent (130). The client agent (111) manages a touchscreen or keypad, handles display layout, detects and tracks a finger movement on the touchscreen, and collects input entry of a PIN (311) from the finger movement based on hidden factors that configure use of the touchscreen or keypad, where the input entry (310) consists of an entered PIN, and information (312) on how the PIN was entered. The server agent (133) can be communicatively coupled to the client agent (111), and receives the input entry for the PIN, and validates the PIN that was entered in view of the information (312) on how the PIN was entered based on a policy configuration (410, 420, 430, 440) for the hidden factors for the input entry on said touchscreen or keypad. Other embodiments disclosed.

Abstract: An approach is provided that trains an artificial intelligence model (AIM) using training data to produce a generalized AIM, wherein the training data comprises log-collected data corresponding to multiple application types and the generalized AIM is trained to detect one or more cross-platform cybersecurity threats. The approach identifies multiple application-specific training data sets, wherein each one of the application-specific training data sets includes labeled application logs corresponding to one of the multiple application types. The approach then fine-tunes the generalized AIM using the multiple application-specific training data sets to produce multiple dedicated AIMs, wherein each one of the dedicated AIMs is trained to detect one or more application-centric cybersecurity threats targeted at a corresponding one of the application types.

Abstract: Embodiments are dynamic investigation playbooks. Events associated with activity in the computing environment may be obtained. Heritage playbooks may be collected based on characteristics of the events such that each heritage playbook includes heritage instructions for investigating the events. An analysis playbook may be obtained based on an analysis of the events such that the analysis playbook includes analysis instructions to automatically investigate the events. An updated analysis playbook may be obtained based on the analysis playbook and portions of the heritage playbooks such that the portions of the heritage playbooks may be included in the updated analysis playbook. An investigation of the events may be executed based on the updated analysis playbook such that actions may be executed based on the portions of the heritage playbooks.