Abstract: A detection device includes processing circuitry configured to acquire position information and a file size of a falsification detection target file, and determine a change in the position information or the file size acquired, and detect falsification of the falsification detection target file in a case where there is a change in the position information or the file size.

Abstract: A method/algorithm or chip/module for establishing DI-encrypted intercommunication, comprising (i) generating IDs for use as a fingerprint of a first device/system; (ii) presenting the fingerprint as a unique authentication of the first device/system to a second device/system to be intercommunicated with; and (iii) requesting the second device/system to utilize the fingerprint as a device-dependent encryption key for creating encrypted data to be transmitted to the first device/system, so as to provide cybersecurity and cryptography protections to the DI-encrypted intercommunication.

Abstract: A computer-implemented method and system is provided which enables interaction between a device and an asset transfer platform. The interaction can only occur if a permit data structure allows it to happen.

Abstract: Methods and systems for carrying out secure retrieval of off-network data are disclosed. A computing system configured for operating as a validator node of a network of nodes operating a decentralized network may be selected to securely retrieve off-network data for the decentralized network responsive to successfully validating a new data block of the decentralized network. The computing system may then retrieve a queue entry from a queue, and determine from the queue entry a data source of the off-network data. The computing system may then retrieve the off-network data from the data source, generate a cryptographic verification that it carried out the retrieval of the off-network data, and store the cryptographic verification in a verification data structure configured for providing authorization for data entries to be included in future data blocks of the decentralized network.

Abstract: Techniques for permission controls from a first provider for a second provider are described. In an example, a computer system stores first account data of a user with a first service provider. The first account data enables execution of a first online service of the first service provider to provide a second online service of a second service provider. The computer system receives second account data of the user with the second service provider. The computer system generates, based on a mapping between a first schema of the second account data and a second schema, third account data. The computer system generates, based on the first account data and the third account data, a report associated with controlling execution of the second online service. The computer system sends permission data to the second service provider indicating whether a permission exists to control the execution of the second online service.

Abstract: A system and method for remediating software container cybersecurity issues at a source is presented. The method includes identifying a release record generated from a deployment platform; identifying a chart file based on the release record, the chart file including metadata and configuration parameters for deploying an application in a software container; generating a plurality of source code fingerprints based on metadata of a source code object; generating a fingerprint for the release record based on the metadata and the configuration parameters; matching the fingerprint for the release record to a first source code fingerprint from the plurality of source code fingerprints corresponding to a first source code object; detecting a cybersecurity issue in the software container; initiating a remediation action based on the cybersecurity issue on the first source code object, in response to the fingerprint of the first source code object matches the fingerprint for the release record.

Abstract: An assessment apparatus is an apparatus that assesses an assessment target device that includes physical components for executing processing appropriate to logical components. The assessment apparatus includes an input unit that acquires device information about the assessment target device; a path determiner that determines, based on the device information, a logical path including an array of one or more logical components and a physical path corresponding to the logical path and including an array of one or more physical components, the logical and physical paths being paths of access to an asset (data or a function) of the assessment target device from the outside thereof; and a risk re-assessment unit that assesses a risk value of the asset in accordance with an attack feasibility level indicating attack feasibility for the determined physical and logical paths and an influence level indicating an influence to be exerted when the asset is invaded.

Abstract: Systems, methods, and apparatuses are provided for checking an integrity of data stored in an electronic control unit of a vehicle. A first hash value is determined based on the stored data using a hash function at the electronic control unit triggered by a request of a boot loader of the electronic control unit. A second hash value is determined based on the stored data using the hash function at the electronic control unit triggered by a request of an external computing device connected to the electronic control unit. The integrity of the stored data is checked by comparing the determined first hash value to the determined second hash value.

Abstract: A technique and system provide protection to information or documents via an authorization policy that is applied to multiple application programs and authorization requests are submitted through a REST API over HTTP or HTTPS. Methods, techniques, and systems control access to protected information or documents and use of content in protected information or documents to support information management policies.

Abstract: The present disclosure is directed to monitoring internal process memory of a computer at a time with program code executes. Methods and apparatus consistent with the present disclosure monitor the operation of program code with the intent of detecting whether received program inputs may exploit vulnerabilities that may exist in the program code at runtime. By detecting suspicious activity or malicious code that may affect internal process memory at run-time, methods and apparatus described herein identify suspected malware based on suspicious actions performed as program code executes. Runtime exploit detection may detect certain anomalous activities or chain of events in a potentially vulnerable application during execution. These events may be detected using instrumentation code when a regular code execution path of an application is deviated from.

Abstract: The present disclosure provides a method for identity authentication, an electronic device and a computer readable storage medium. The method for identity authentication may include: acquiring an identity proof of a user, wherein the identity proof comprises an identity attribute of the user and a Merkel root verification path, and the Merkel root verification path in the identity proof is a verification path obtained when the identity proof is generated and based on the identity attribute selected by the user to be disclosed; deducing the Merkel root verification path according to the identity attribute disclosed in the identity proof; and authenticating the identity proof of the user according to the deduced verification path and a verification path in the identity proof.

Abstract: Systems, methods and non-transitory computer readable media for controlling access in privacy firewalls are provided. A request to access a content of an element may be received. The content of the element may include a first portion and a second portion. The first portion may include identifiable information and the second portion may include no identifiable information. A permission record corresponding to the element may be accessed. Based on a value in the permission record, full, partial or no access to the content of the element may be provided. Full access may include access to the first portion and the second portion of the content of the element. Partial access may include access to the second portion of the content of the element and excludes access to the first portion of the content of the element.

Abstract: A method for checking data integrity when data are being transmitted in a vehicle. The method includes carrying out the following steps automatically: ascertaining the data at the vehicle; carrying out a preparation for the transmission of the ascertained data, in which at least one artificially generated and reproducible substitute portion is defined as an approximation of a data portion of the data by means of a piece of substitute information; carrying out the transmission of the data; carrying out the data integrity check on the transmitted data using the substitute information.

Abstract: There is provided a framework to record to a blockchain unique identification (signatures) of physical items which have unique, random properties. Physical items are analysed using spectral imaging to determine the unique identifications. Hardware is shown to perform the analysis and various nodes of a peer-to-peer network are shown and described, which nodes may be configured to provide proof of location, privacy, trust and authentication. The solution can work even if the item is modified in some way if a subset of the unique properties remain.

Abstract: This application provides a method and an apparatus for editing a block chain. The method for editing a block chain includes: A first node receives a request message used to request to edit data, and performs endorsement on the request message to generate an endorsement result. Further, the first node sends the endorsement result to each of at least one second node, where the at least one second node belongs to a second node set. The node with the endorsement function in the block chain performs endorsement on an editing request, and sends an endorsement result to a node with an editing function, to implement block chain editing while improving security assurance.

Abstract: The present disclosure relates to systems, non-transitory computer-readable media, and methods for utilizing a reinforcement fine-tuning pipeline to fine tune an agent machine learning (ML) model utilizing user-defined grader endpoints and/or external tools with a multi-layer security architecture. For example, the disclosed systems can utilize a multi-layer security architecture to filter incoming training datasets, perform content refusal checks, chain-of-thought leak detections, and/or governance oversights prior to training the agent ML model, during active training of the agent ML model using external tools and/or grader models, and/or during post-training of the agent ML model (prior to releasing a fine-tuned snapshot of the model).

Abstract: Systems and methods are disclosed herein for determining reachability of vulnerable code. In some embodiments, a tool receives an alert of a vulnerability within an application, and determines a set of dependent packages by referencing a knowledge graph. For each vulnerable node of the dependency chain having the vulnerability, the tool identifies a set of node pairs having a direct link between an upstream node and the vulnerable node, determines whether the vulnerable node is reachable by each upstream node of the set of upstream nodes, and annotates links for unreachable nodes. For upstream nodes that are able to reach the vulnerable node, the tool iteratively determines whether a respective further upstream node is able to reach respective ones of their respective directly connected downstream nodes. The tool generates a pruned dependency chain by determining a boundary of the dependency chain, separating reachable vulnerable nodes from unreachable vulnerable nodes.

Abstract: A method of rescinding access to a designated block within a blockchain, wherein the designated block contains data encrypted with a content encryption key and is associated with metadata, wherein the metadata for the designated block include an obsolescence lock public key. The method includes creating, at the time the designated block is created, an obsolescence lock for supporting a rescission request if the rescission request is agreed upon by a required number of authorized parties for the designated block; splitting the obsolescence lock private key into a number of secret shares; and upon receiving particular rescission instruction block, an agreement instruction block and a confirmation instruction block, removing all encrypted content encryption keys from the metadata of the designated block, thereby rescinding access to the original data within the designated block. An equivalent method is presented to rescind access to a blockchain.

Abstract: A system and method for authenticating a user device is disclosed. In one embodiment, the method comprises: transmitting a request for credentials from the user device, wherein the request comprises a user device identifier and the credentials comprise an asymmetric key pair having a public key and an associated private key, the private key being encrypted; receiving the credentials in the user device, the credentials comprising the encrypted private key and the public key; retrieving quick response (QR) code data associated with the user device identifier from a QR code data directory, the QR code data generated from the public key and stored in the QR code data directory according to the user device identifier by a secure online service; extracting the public key from the QR code data; and establishing an authenticated and encrypted communication session with the user device according to the extracted public key.

Abstract: A computer-implemented method of generating a respective signature share of a digital signature for signing a message, wherein the method is performed by a first participant of the group and comprises: obtaining at least the threshold number of respective participant indexes, wherein the obtained respective participant indexes comprises a first participant index associated with the first participant; generating a private key index, wherein the private key index is generated based on a hash of a combination of the obtained respective participant indexes; generating a second common private key of the first hierarchical key structure; and generating a first signature share of the digital signature.