Abstract: A method and apparatus for proving the originality of a creative design in a communication system, on the basis of a wearable device, by proving a causal relationship between a creative process of the creative design and a creative output by using a hash code associated with an image for each creative process of the creative design, and generating a piece of final hash information by combining a hash code for an intermediate image and a hash code for a final image during a creative process of a creative design through an arithmetic function, and transmitting an NFT including the final hash information and information about the final image to a blockchain, such that a design creator can claim an association between the intermediate image and the final image during the creative process of the creative design together at the time of disclosure of the design on a blockchain network.

Abstract: Methods can be provided for reducing risks of being a target of cyber attacks, or a data breach of personal data, or impersonation or theft of a digital identity, etc. Such methods may be implemented, for example, via a security application.

Abstract: Disclosed herein is an algorithm selector logic for determining an operational flow of operating system (OS) components. The algorithm selector logic features data retrieval logic, emulation logic, trace generation logic and software component selection logic. The data retrieval logic retrieves a targeted memory structure for an OS component. The emulation logic conducts emulation operations on the OS component. The trace generation logic inserts intercept points at memory address offset locations that correspond to parameters within the targeted memory structure to generate a trace. The software component selection logic compares an execution flow associated with the generated trace with known execution flows, where the known execution flows are associated with different OS versions.

Abstract: The cipher message data is distributed to an external device while ensuring the confidentiality of the cipher message data. A terminal device performs communication with an external device through a broker on the basis of a publish-subscribe message model. The terminal device includes: an acquisition unit that acquires external data; an encryption processing unit that encrypts at least a part of the external data to generate cipher message data including ciphertext; and a data distribution unit that distributes an encrypted publish message including topic designation data of plaintext and the cipher message data to the broker.

Abstract: A method, comprising: executing an embedded malware detector, the embedded malware detector being executed inside a first guest operating system, the first guest operating system being executed on a storage processor that is part of a storage system, the storage processor being configured to execute one or more second guest operating systems in addition to the first guest operating system, each of the second guest operating systems being arranged to execute software for reading and/or writing data to one or more storage devices that are provided in the storage system; identifying, by the embedded malware detector, a given one of the storage devices; obtaining, by the embedded malware detector, a snapshot of the given one of the storage devices; mounting, by the embedded malware detector, the snapshot in the first guest operating system; scanning the mounted snapshot for malware.

Abstract: Systems and methods for secure modular hardware binding in a Data Center Modular Hardware System (DC-SCM) environment are described herein. According to one embodiment, an Information Handling System (IHS) includes multiple Complex Programmable Logic Devices (CPLDs), and computer-executable logic to, for each of the CPLDs: store an encrypted secret key in a platform Root-of-Trust (RoT) and the CPLD, and receive, by the platform RoT, a request to authenticate a firmware stack installed on the CPLD. The logic may then present, by the CPLD, an encrypted secret key to the platform RoT, authenticate, by the platform RoT, the firmware stack by comparing the encrypted secret key received from the CPLD with its stored version of the encrypted secret key, and allow operation of the CPLD based on the authentication.

Abstract: Solutions are disclosed that provide isolated telecommunication (telco) functions for enhanced security monitoring and analysis. Examples monitor a plurality of network functions (NFs) of a wireless network for indications of malicious activity, such as mobility management entities (MMEs), user plane functions (UPFs), authentication server functions (AUSFs), and others. When suspected malicious activity is detected from a user equipment (UE), an isolated telco stack (i.e., an isolated network slice) is stood up in real-time to isolate the traffic to/from the UE. This facilitates capturing and analyzing the traffic, so that a responsive action may be selected. The configuration of the isolated telco stack (i.e., the NFs included in the isolated network slice) may be customized based on the nature of the suspected malicious activity. For example, suspected data exfiltration will trigger a first configuration, whereas suspected denial service will trigger a different configuration.

Abstract: A computer-implemented method (CIM), according to one approach, includes generating a primary cryptographic recovery key, and generating an alternate cryptographic recovery key, where the alternate cryptographic recovery key is generated and stored in a cryptographic Hardware Security Module (HSM). The method further includes storing an encrypted fallback key in metadata associated with a data set, where the encrypted fallback key is an operational key encrypted by the primary cryptographic recovery key, and storing a Recovery Key Verification Pattern (RKVP) in the metadata, where the RKVP is associated with the primary cryptographic recovery key and is stored for the primary cryptographic recovery key. In response to a determination that the operational key is unavailable, the encrypted fallback key is retrieved to perform a data decryption operation.

Abstract: In one aspect, in general, a system for securely providing data for training a model comprises: a source entity comprising at least one processor and configured to: receive data configuration instructions associated with training the model, transform unprepared data from one or more data sources into prepared data based at least in part on the data configuration instructions, the prepared data comprising one or more prepared data units, and produce, using a signing module, a data package comprising the one or more prepared data units and a respective signature object associated with each of the one or more prepared data units; wherein the signing module comprises specialized circuitry configured for accelerating at least one quantum resistant computational operation.

Abstract: According to a present invention embodiment, software is analyzed for security vulnerabilities. Information from a security scan of code is analyzed to identify a security issue pertaining to a code portion. A machine learning model determines an initial risk factor score for the security issue based on a history of information pertaining to one or more prior security scans. The initial risk factor score is refined to produce an overall risk factor score for the security issue based on a confidence of the initial risk factor score. The initial risk factor score is refined based on one or more risk factor scores for operations within the code applied to a variable of the code portion. A classification of the security issue is determined as one of a valid security issue and a false positive based on the overall risk factor score.

Abstract: A REE can approve or deny authentication based on a sensor output signal and a secure element (SE) operatively coupled to the REE can detect a replay attack. A feature extractor produces a feature vector from the sensor output signal. The feature vector can be used to authenticate a user. Detecting the replay attack can include storing previous feature vectors, sending a security breached signal to the REE in response to determining that the feature vector equals one of the previous feature vectors, and storing the feature vector as one of the previous feature vectors. The REE can deny authentication in response to receiving the security breached signal.

Abstract: Systems and methods for monitoring a plurality of vehicles are provided. The method involves operating at least one processor to: determine, based on cyber risk data corresponding to a plurality of ECU models, a cyber risk score for each ECU model; receive, from each of the vehicles, one or more security logs; map, for each security log, i.) the ECU model of the ECU that recorded the security log, and ii.) the cyber risk score of the ECU model corresponding to the security log; detect a cybersecurity threat in at least some of the vehicles based on i.) at least one event in at least one security log, and ii.) at least one cyber risk score corresponding to the at least one security log; and in response to detecting the cybersecurity threat, transmit an alert indicating at least one vehicle corresponding to the at least one security log.

Abstract: A mitigation system protects data in a data store that is not yet encrypted by a successful ransomware attack against encryption. Data is stored in the data store as a set of versions identified in a data tree, and a version can only be updated by writing a new version to the tree. Access controls to prevent modification of the tree are also in place. Following an attack, a restore function is executed to attempt recovery. This function computes an entropy delta that compares an entropy of an encrypted version, with an entropy of versions of the data not yet encrypted. Based on the computed entropy deltas, the restore function identifies a latest clear version of the data, and a restore operation is then is initiated with respect to this version.

Abstract: Disclosed are various examples for controlling and managing data access to increase user privacy and minimize intentional or inadvertent misuse of accessed information. Upon detecting a request for an administrator review of a user client device, permission for administrator access can be obtained from a user associated with the user client device. The client device identifier can be obfuscated such that the administrator accessing the data is not provided the actual device identifier. An administrator review session between the user client device and an administrator client device can be established to allow the administrator client device access to the permitted client device data.

Abstract: Data security for data sequences is disclosed, including: receiving, over a network, a first sketch corresponding to a first file, wherein the first sketch was determined from hash values generated from a data sequence associated with the first file; determining that the first sketch and a second sketch corresponding to a second file at least partially overlap; and determining whether a data security policy is violated based at least in part on the determination that the first sketch and the second sketch at least partially overlap.

Abstract: Identity nodes within bidirectional dual node hashchain (BDNH) bundles generate hash keys by processing partial metadata and linking them through identity graphs. Translation nodes perform identity resolution, data anonymization, and re-keying by transforming original identifiers into anonymous IDs and re-key IDs. Laplace noise enabler capsules introduce Laplace noise into translation layer logs for differential privacy. BDNHs share metadata between adjacent bundles for secure and efficient data transmission. A cognitive analytics layer shared among all bundles verifies hashed encrypted data packets using a gossip protocol for real-time validation. An analytics workspace layer activates re-key IDs and creates digital tags for datasets using BERT transformers, linking data through knowledge graphs. The system manages parallel processing and includes machine learning modules, homomorphic encryption, federated learning, zero-knowledge proofs, attribute-based encryption, and anomaly detection.

Abstract: Data Integrity Field (DIF) is used to implement compression verification. When a write IO operation is received, the write IO operation is divided into data blocks, and a respective DIF is created and appended to each data block. When the write IO is compressed, the data blocks and respective DIF are collectively compressed to form compressed data. The compressed data is divided into compressed data blocks, and a respective second DIF is created and appended to each respective data block of compressed data. To verify that the compressed data is able to be decompressed, a copy of the compressed data is decompressed to restore the original data blocks and respective DIF. Each respective DIF is used to verify the content of its respective data block. In response to a determination that respective DIF match the respective data blocks, the decompression process is deemed to be verified.

Abstract: A method for detecting a memory safety bug and an electronic device supporting the same are provided.

Abstract: Systems, methods and devices for implementing cryptographic and security-in-depth techniques on-board spacecrafts or satellites are provided, to allow users to task activities or retrieve satellite data from the satellite system in an anonymous, secure, safe, and private manner, such that no other user sharing the satellite system resources can know what has been tasked or transmitted to the ground. Considerable advantages can be realized by providing spacecraft or satellite systems with a substantial capacity of applying security-in-depth and cryptographic techniques and protocols to data and requests, based on autonomous tasking, allowing a secure, safe and private use of spacecraft or satellite resources.

Abstract: Systems, methods, and apparatuses for determining a cause of an error in a computing environment, such as a permission denied error in a linux computing environment, are provided herein. An example method comprises executing an application in a linux environment, monitoring a plurality of linux subsystems and functions via an instrumentation inserted on a kernel, and responsive to a failure of the application, providing a summary of a cause of the failure based upon the monitoring of the linux subsystems and functions.