Abstract: The disclosed implementations include a computer-implemented method of a controls framework to monitor multiple controls of multiple processes. The method can include linking the multiple controls in a hierarchical arrangement with and obtaining information about compliance by a particular subsystem, a particular process, or a particular sub-process of the organization with a particular control. The method can further include generating a risk measure for the organization based on information about a quantity of controls, types of control, failure, or noncompliance with the particular control and communicating, by the central management component to a computing device coupled to the system, at least an indication of the risk measure.

Abstract: A method and system for processing an email having redacted content, and/or where the message content has been encrypted and recorded as encrypted, is provided.

Abstract: The present disclosure relates to a method and system for managing a meeting session. In accordance with one example, there is provided a method of managing a meeting session on a server that manages the meeting session, the meeting session comprising one or more participant devices and a presenter device. The method comprises receiving one or more break request messages from the participant devices, and sending a break message to the participant devices, the break message causing a break notification to be displayed on a display of the participant devices.

Abstract: In accordance with embodiments disclosed herein, an exemplary system or computer implemented method for implementing Persistent Management Agent (PMA) functions for the control and coordination of DPU and DSLAM components may include, for example: a memory to store instructions for execution; one or more processors to execute the instructions; a virtualized module operating on virtualized computing infrastructure, in which the virtualized module is to provide a virtualized implementation of a plurality of functions associated with one or more remotely located Distribution Point Units (DPUs) and/or Digital Subscriber Line Access Multiplexers (DSLAMs), each of the one or more remotely located DPUs and/or DSLAMs having a plurality of broadband lines coupled thereto; in which the virtualized module is to further control Persistent Management Agent (PMA) functions and control coordination of the one or more remotely located DPUs and/or DSLAMs and the plurality of broadband lines coupled with the one or more remote

Abstract: A system and method for cloud native discovery and protection. The method includes discovering instances of a plurality of cloud assets in a cloud native environment based on a plurality of application programming interface (API) endpoints in the cloud native environment, wherein the plurality of API endpoints is identified based on cloud credentials for each of the plurality of cloud assets; determining at least one cloud asset instance that lacks active security protection based on a configuration of at least one entity deployed in the cloud native environment; and reconfiguring at least a portion of the cloud native environment with respect to the at least one cloud asset instance that lacks active security protection.

Abstract: The system described herein may utilize a data stream connection to detect that a new message is transmitted between users. The system may perform various pre-processing techniques on the new message to identify that the new message is an objection message candidate. The system may retrieve one or parent messages of the new message. The new message and the parent messages may be input into a model trained to classify objection messages. The model may identify that the new message is classified as an objection message based at least in part on processing the new message and the parent messages. An objection classification identifier may be stored in association with the new message based at least in part on the result of the processing by the model.

Abstract: A scalable brokerless messaging network includes a service mesh implementing a plurality of service nodes in signal communication with one another to exchange a plurality of messages. A control plane is in signal communication with the plurality of service nodes and is configured to register an application service associated with a given service node included in the service mesh. The plurality of service nodes define a messaging middleware layer that establishes several point-to-point connections between each service in the network via transmission control protocol (TCP) sockets.

Abstract: In an attempt to establish a communication session between a first communication entity and a second communication entity, a first message is received. For example, the first message may be a SIP INVITE message. A determination is made, based on a registration message from the first communication entity and/or the second communication entity, that at least one of the first communication entity or the second communication entity is Internet Protocol (IP) version intolerant. In response to determining that the at least one of the first communication entity or the second communication entity is IP version intolerant, one or more IP addresses are adapted in messages (e.g., the SIP INVITE message) for establishing the communication session. The adaption changes/removes the one or more IP addresses to a different IP version to ensure proper IP compatibility.

Abstract: The invention relates to a method for cryptographically secure storing a file (101) using a web application executed by a web browser (106) on a user computer system (104, 162, 168) of a user (102, 160). The method comprises: encrypting the file (101) on the user computer system (104, 162, 168) by the web application, providing a distribution plan by the web application, fragmenting the encrypted file (101) on the user computer system (104, 162, 168) by the web application into a plurality of file fragments (F1-F4) according to the distribution plan, sending the resulting file fragments (F1-F4) by the web application over the network (178) to the storage services identified by the distribution plan (SD1-SD6).

Abstract: A method (800) for logging microservices in a platform for unified governance of a plurality of intensive computing solutions (70) comprising: a proxy microservice (20), a token security microservice (30), at least one security repository (35,36,37), a logging module (90), a service register (91), and comprising the steps of: Reception (820) of a join request from a new microservice (60), Verification (830) of the unique identifier of the new microservice (IDMS), Generation (840) of an authentication token and transmission to the new microservice, Reception (850) of a logging request from a new microservice, comprising data that provides access to the resources of the new microservice and the generated authentication token, Verification (860) of the authentication token with the token security microservice (30), Logging (870), when the authentication token is validated, data that provides access to the resources of the new microservice on the service register (91).

Abstract: In some embodiments, identifying a replay attack in an industrial control system of an industrial asset includes receiving a first set of time series data associated with an ambient condition of one or more first monitoring nodes at a first location of the industrial control system. An actual system feature value for the industrial asset is determined based upon the first set of time series data. A second set of time series data indicative of the ambient condition at a second location is received, and a nominal system feature value is determined based upon the second set of time series data. A correlation between the actual feature value and the nominal system feature value is analyzed to determine a correlation result. A request received by the industrial control system is selectively categorized as a replay attack based upon the correlation result.

Abstract: A method including transmitting, by a first device in communication with a second device in a mesh network, a first meshnet communication to the second device based at least in part on utilizing a meshnet local port dedicated for communicating meshnet communications; selectively transmitting, by the first device to an infrastructure device, a binding request based at least in part on utilizing the meshnet local port dedicated for communicating meshnet communications; and receiving, by the first device, a second meshnet communication from the second device based at least in part on utilizing the meshnet local port dedicated for communicating meshnet communications. Various other aspects are contemplated.

Abstract: Provided is a method of controlling an Internet of Things (IoT) device using a messenger bot, the method including adding a chatroom with a bot for interaction between an IoT server and a user of a messenger; and instructing the IoT server to transmit a control signal to the IoT device in response to a control input that is input from the user to the bot through the chatroom.

Abstract: The invention concerns a scheme for authentication between a telematic control unit (10) for a machine for industrial usage (220), preferably a vehicle, and a core server system (40). The telematic control unit (10) is associated with a hardware identifier and comprises an identity module (14) storing an identifier of the identity module (14) and a secret key which is specific to the identifier. The core server system (40) is connected to a telecommunication server (25) of a public land mobile network, wherein the telecommunication server (25) also has access to the secret key which is specific to the identifier. The inventive authentication scheme preferably relies on an advantageous use of a unique hardware identifier of the telematic control unit.

Abstract: An exemplary edge compute orchestration system that is communicatively coupled with a set of edge compute nodes in a communication network accesses performance data aggregated by a particular edge compute node of the set. The performance data includes a performance metric and geolocation data detected by a user equipment (UE) device communicatively coupled to the communication network. The edge compute orchestration system integrates the performance data into a geolocation-indexed performance dataset representative of detected performance metrics, indexed by geolocation, for the communication network. Then, based on the geolocation-indexed performance dataset, the edge compute orchestration system selects the particular edge compute node for performance of an edge compute task. Corresponding systems and methods are also disclosed.

Abstract: In one embodiment, a road side unit (RSU) establishes a data offload session with a vehicle in the vicinity of the RSU based on a session establishment request sent by the vehicle, and stores data received from the vehicle during the data offload session in its memory. The RSU generates storage record information (including identifying information for the RSU) for the stored data, and transmits the storage record information to the vehicle.

Abstract: A data anonymity method and a data anonymity system are provided. The data anonymity method includes the following steps. A data set comprising a plurality of direct-identifiers, a plurality of quasi-identifiers and a plurality of event logs each of which includes an activity and a timestamp is obtained. A content of each of the direct-identifiers is replaced by a pseudonym. The quasi-identifiers are classified, via a group-by algorithm with k-anonymity, as a plurality of equivalence classes. The activities corresponding to each of the direct-identifiers are linked according to the timestamps to obtain a plurality of event sequences. A similarity hierarchy tree is obtained according to a plurality of edit distances among the event sequences. The event sequences are grouped according to the similarity hierarchy tree with k-anonymity to obtain at least one group. The event sequences which are in the group are generalized.

Abstract: A method of commissioning a domestic appliance may include receiving, from a user interface of an existing household appliance, a request to add a new household appliance to the user account. The method may further include scanning for the new household appliance with the existing household appliance and establishing a direct connection from the existing household appliance to the new household appliance. The method may still further include obtaining a provisioning token from a remote database with the existing household appliance and transmitting the provisioning token from the existing household appliance to the new household appliance via the direct connection.

Abstract: Aspects of the disclosure relate to an automated and adaptive validation of a user interface. A computing platform may extract, from a webpage, one or more components of the webpage. Subsequently, the computing platform may determine, for a component, one or more attributes and one or more rules. Then, the computing platform may associate, by applying a clustering algorithm and based on the one or more attributes and the one or more rules, the component with a cluster of a plurality of clusters. Then, the computing platform may retrieve, from a database and for the cluster, a master test script. Subsequently, the computing platform may generate, from the master script, a test script for execution, and may run, for the webpage, the test script to validate the component. Subsequently, the computing platform may trigger one or more recommendations based on a determination whether the test script is successful.

Abstract: Systems and methods for on demand service integration. A system includes at least one processor and a storage medium storing instructions that, when executed by the one or more processors, cause the at least one processor to perform operations including receiving from a customer system a request to integrate a partner service with an integrator instance at the customer system and searching an integrator database for a partner service communication template based on the received request. The operations also include configuring the integrator instance to receive communications from a partner service instance based on the communication template and establishing a communication link between the integrator instance and the partner service instance.