Abstract: A method may include during playback of content, periodically capturing an audio overlay of an audio track of the content, wherein the audio overlay includes an encrypted timestamp associated with a time of creation of the content. The method may also include, during playback of the content: periodically extracting the encrypted timestamp from the audio overlay, continuously decrypting the encrypted timestamp with a public key of a public-private key pair comprising a private key used to encrypt the encrypted timestamp, in order to continuously create a decrypted timestamp, and continuously comparing the decrypted timestamp with a creation time of the content to verify one or more of authorship and authenticity of the content.

Abstract: A client computing device includes a display and a processor coupled to the display. The processor operates a browser to access a store providing resources that are available. The available resources are displayed within a web page on a display. A launch message is generated in response to one of the resources being selected. An extension cooperating with the browser is operated to append a store ID identifying the store to the launch message. An adapter is operated to receive from the extension the launch message with the store ID, and assign a native messaging host process to the store. The native messaging host process is external the extension and supports communications with a native app on the client computing device. The native app is used to initiate launch of the selected resource.

Abstract: Real-time detection of DNS infiltration traffic is disclosed. A DNS response associated with a DNS query sent by a client device is received. An attempted DNS infiltration is detected based at least in part on an automated analysis of the DNS response. In response to the detection, a remedial action is performed.

Abstract: A method and network node for intent based automation for partitioned radio systems are disclosed. According to one aspect, a method in a network node includes determining at least a first intent metric and a second intent metric based on performance measurements. The first intent metric indicates a quality of experience of first communication network users and the second intent metric indicates a quality of experience of second communication network users. The method also includes comparing the first and second intent metrics to respective first and second service level intents for communications of respective first and second communication networks. A service level intent may indicate a minimum service level. A radio resource partition (RRP) between the communications of the first and second communication networks is determined based at least in part on the comparison.

Abstract: The technology disclosed herein enables 5G wireless monitoring and analysis using an enhanced feed of 5G SBI traffic. In a particular example, a method includes receiving a 5G SBI message in a Service Communication Proxy (SCP), extracting information from protocols used to transmit the 5G SBI message, and including the information in a mirror message with a copy of a payload of the 5G SBI message. The method further includes transmitting the mirror message to a monitoring system.

Abstract: Various embodiments comprise a wireless communication network configured to anonymize network Key Performance Indicators (KPIs) to train a machine learning model. In some examples, the wireless communication network comprises a network analytics system and a KPI store. The network analytics system retrieves the network KPIs generated by network KPI sources. The analytics system filters the network KPIs based on an intended function of the machine learning model. The analytics system identifies correlated ones of the filtered KPIs and groups the correlated ones of the filtered KPIs into KPI groups based on a network condition. For each KPI group, the analytics system sorts the filtered KPIs into KPI ranges. For each KPI range, the analytics system tokenizes the KPI range by converting the filtered KPIs that compose the KPI range into strings. The KPI store stores the tokenized KPIs in a KPI database accessible by the machine learning model for training.

Abstract: Disclosed herein are systems, methods, and computer-readable media for authentication in a multi-cloud cellular service. In one aspect, a method includes receiving, at a controller of a local site within the multi-cloud cellular service, a network connection request from a device, the cloud-based authentication component being a central network component configured to store device credentials and network policies for authenticating devices connecting to the multi-cloud cellular service across all sites associated with the multi-cloud cellular service. In one aspect, the method also includes locally authenticating, by the controller, the device using stored credential information obtained from the cloud-based authentication component prior to losing the connectivity to the cloud-based authentication component.

Abstract: Systems and methods for person identification using wireless signals is disclosed. Channel state information is collected from wireless signals received by a wireless receiver. The channel state information (CSI) is pre-processed to determine a gait and biometric features including body shape and height associated with a particular person based on selected CSI segments, which are annotated with a class indicative of the gait. The particular person is identified, using a machine learning model, based on the gait and the other biometric features, wherein the machine learning model is trained using classifier training and training data including the gait and information from the CSI segments, from which one or more parameters is determined. After training, the person can be identified based on packets from received wireless signals. The method further includes controlling a machine, in response to detecting the presence of the person, based on established usage patterns.

Abstract: Generating the ancestry of a deployment in a cloud environment, including: gathering information describing a deployment in a cloud environment; and generating, based on the information, an ancestry of the deployment describing one or more relationships between the deployment and one or more application development resources incorporated into the deployment.

Abstract: A system and method are provided for integrating a property management system and a cyber vulnerability management system to provide remediation for assets in an environment. Information obtained about network connected mechanical assets within the environment is respectively obtained from a tag on the asset. For each asset the asset is identified through a property management database based on the information in the tag and a cyber position of the asset is obtained through a digital network identifier in the tag from the cyber vulnerability management system. In response to identification of the asset having a cyber vulnerability, remediation for the cyber vulnerability is determined, scheduled, and initiated.

Abstract: Systems and methods that operate an Information Handling System (IHS) support secure telemetry for use in a zero-trust environment. Upon being initialized, the IHS retrieves a factory-provisioned resource locator of a service that provides the location of a policy decision point of the zero-trust environment. The IHS establishes an encrypted session with the policy decision point that is located using the factory-provisioned resource locator. Via the encrypted session, the IHS receives a symmetric key from the policy decision point, where the key may be fleet-wide key for encryption of a customer's telemetry. Telemetry that is generated by the sensors is identified when ready for transmission and encrypted using the symmetric key received from the policy decision point. The customer's encrypted telemetry can then be securely transmitted.

Abstract: In anticipation of a client device establishing a connection over a network with a remote host service, a pre-connect module generates a connection request (referred to herein as a “pre-connect request”) on behalf of the client device and sends the pre-connect request to the remote host server. The remote server responds with a connection response (referred to herein as a “pre-connect response”), which is pre-positioned on the client-side of the network along with information for generating a later connection request that is in material respects the same as the pre-connect request. Then, when the client device later seeks to establish a connection with the remote host server, the client device determines whether it has in local storage generation information for generating a connection request to the remote host server. If so, the client device uses the generation information to generate a connection request that is in material respects the same as the pre-connect request.

Abstract: A computer-implemented method for dynamically disabling third-party web browser extensions during online browsing sessions may include (i) detecting initiation of a target online browsing session including one or more websites, (ii) determining browser extensions associated with the websites, and (iii) performing a security action that protects against a data privacy invasion by disabling the browser extensions for a duration of the target online browsing session. Various other methods, systems, and computer-readable media are also disclosed.

Abstract: Systems and methods are provided for a multi-tenant collective communication fabric for optimal utilization of communication links between compute nodes of an interconnected system. Examples include allocating a plurality of compute nodes to a first workload and obtaining a topology of the interconnected system representative of an indirect path between the allocated compute nodes. The indirect path comprises a non-allocated compute node of the interconnected system. The examples include creating plurality of slices of resources of the non-allocated compute node, with a first slice dedicated to processing and forwarding data traffic along the indirect path and a second slice configured for allocation to a second workload. The examples also include executing the first workload by the allocated compute nodes and the non-allocated compute node, wherein data traffic from the plurality of allocated compute nodes is communicated via the indirect communication path.

Abstract: Techniques described herein relate to a method for performing threat modeling. The method includes obtaining a threat modeling request associated with a process executing on a node of a cluster; in response to the obtaining: generating node information associated with the process; generating a data flow diagram associated with the process using the node information; comparing the node information with a threat database to predict at least one threat associated with the process; generating a threat report based on the at least one threat; providing the threat report and data flow diagram to a user associated with the process; and initiating performance of threat mitigation based on the threat report and the data flow diagram.

Abstract: Embodiments of this application disclose example authentication event processing methods and apparatuses. One example method includes receiving, by a unified data management network element, a second authentication event processing request from an authentication server network element. The unified data management network element can then query an authentication event corresponding to the second information. The unified data management network element can then process the authentication event. The unified data management network element can then send a third authentication event processing request to a unified data repository network element. The unified data management network element can then receive a third authentication event processing response from the unified data repository network element. The unified data management network element can then send a second authentication event processing response to the authentication server network element.

Abstract: According to one aspect of the concepts and technologies disclosed herein, a system can separate permissions, rules, and controls into a discrete intermediate layer of a universal conceptual control management hierarchy as control objects. The system can define at least one interaction for each of the control objects. The system can assign resources to the control objects. A first control object of the control objects can be a low-level control object that encompasses the at least one interaction with a specific resource of the resources. A second control object of the control objects can be a sub-object of the first control object. The second control object can have a restriction. The restriction can be applied on top of the second control object. The restriction alternatively can be chained to the second control object with an additional restriction.

Abstract: A network security monitoring system having a plurality of data sources for providing security data, an extraction unit for extracting the security data from the sources of the security data to form extracted security data, a graphing unit for mapping the extracted security data to at least one or more data fields and data models to form graph data, and a data lineage determination unit for determining a data lineage between the log data and one or more of the alerts based on the graph data.

Abstract: Tracking and relating discovered security issues over time, including: identifying, based on a static code analysis scan of a non-executable representation of an application, a vulnerability in the application; gathering information describing one or more events associated with the vulnerability in the application; and generating, based on the information, a time-series analysis of the vulnerability.

Abstract: Methods, apparatus, systems, architectures and interfaces for a Multi-access Edge Computing (MEC) host providing a MEC platform, including a reliable and available wireless (RAW) control entity, are provided. A method may include any of: generating MEC application information associated with a MEC-to-RAW request according to information indicating a MEC application; transmitting, to another network entity, the MEC-to-RAW request including the MEC application information; and receiving, from the other network entity, a MEC-to-RAW response including information indicating any of: (1) a wireless communication network path, and (2) RAW control information associated with the wireless communication network path.