Abstract: An intrusion detection and prevention system (IDPS) has detection probes and detection hubs that are deployed onboard a connected vehicle and a detection correlation backend that is deployed on the cloud. A detection probe receives raw packets of network traffic of a communication network of the connected vehicle. The detection probe filters the raw packets in accordance with packet filter rule entries to generate packets of interest. The detection probe scans the packets of interest for data indicative of network threats and outputs corresponding unfiltered detection logs. The detection probe filters the unfiltered detection logs in accordance with detection filter rule entries to generate detection logs of interest. A detection hub aggregates detection logs of interest from one or more detection probes to generate aggregated detection logs. A detection correlation backend evaluates the aggregated detection logs to detect network threats.

Abstract: A computer-implemented method for distributing a copy of event data recorder (EDR) data of a vehicle includes sending index information uniquely identifying respective member vehicles of a dynamic vehicle network that include candidate vehicles located within a predetermined geo distance of a host vehicle, sending a fragment of a private key associated with EDR data of the host vehicle to the respective member vehicles of the dynamic vehicle network, distributing segments of replicated EDR data from the host vehicle among the respective member vehicles, and responsive to an expiration of a predetermined lifecycle duration associated with the dynamic vehicle network and an absence of an incident of the host vehicle: disbanding the dynamic vehicle network, and initiating a next dynamic vehicle network including a set of next candidate vehicles.

Abstract: Each module of a plurality of modules receives intent metadata associated with a data product instance of a data mesh. Each module corresponds to a unique data governance category of a plurality of data governance categories and a request associated with data was intercepted at the data product instance. Each module receives policy metadata associated with the data governance category corresponding to the module. Each modules determines, based on the intent metadata and the policy metadata, whether the request is valid for the data governance category corresponding to the module. Each modules transmits an indication of whether the request is valid for the module.

Abstract: Systems and methods for building management utilizing adaptive edge processing are disclosed. The building system can store gateway components on storage devices. The gateway components can facilitate communication with a cloud platform and facilitate communication with a physical building device. The building system can identify a computing system of the building that is in communication with the physical building device. The physical building device can store one or more data samples. The building system can deploy the gateway components to the computing system responsive to identifying that the computing system is in communication with the physical building device. The gateway components can cause the computing system to communicate with the physical building device to receive the one or more data samples and cause the computing system to communicate the one or more data samples to the cloud platform.

Abstract: A telecommunications system is disclosed that coordinates and executes complex communication tasks using structured messaging and off-line synchronization.

Abstract: Systems and methods are provided herein for supplying localized weather information to a user. This may be accomplished by a system receiving a request to generate a weather report for a location. The system may identify weather information sources within a threshold distance of the location, wherein one or more of the weather information sources is a mobile weather information source. The device may generate a weather report for the location based on the weather information received from the weather information sources.

Abstract: A method is provided for securely provisioning a plurality of integrated circuits (ICs) manufactured by a first entity for use in a plurality of manufactured product types manufactured by a second entity. Each IC of the plurality of ICs includes a key pair and a unique identifier (UID). The first entity generates a plurality of key pairs that are not related to the plurality of ICs. A plurality of product types is received from the second entity. A plurality of certificates is generated by the first entity using the UIDs and the key pairs. The plurality of certificates is transferred from a first computer system of the first entity to a second computer system under physical control of the second entity. The second entity injects the plurality of ICs with selected certificates of the plurality of certificates. Unused certificates may be deleted from the second computer system.

Abstract: Disclosed are a method and an apparatus for providing services in a virtual desktop environment. A method for providing services in a virtual desktop environment according to an exemplary embodiment of the present invention may include: (a) receiving a VDI service request for a virtual desktop infrastructure (VDI); (b) determining component information of a basic VDI image in response to the VDI service request; (c) receiving external service related information associated with the basic VDI image from a content management system (CMS) server; and (d) generating a final VDI image for the VDI service by reflecting the component information and the external service related information to the basic VDI image.

Abstract: Systems, methods and apparatuses to provide memory as a service are described. For example, a borrower device is configured to: communicate with a lender device; borrow an amount of memory from the lender device; expand memory capacity of the borrower device for applications running on the borrower device, using at least the local memory of the borrower device and the amount of memory borrowed from the lender device; and service accesses by the applications to memory via communication link between the borrower device and the lender device.

Abstract: Methods, systems, and devices for identifying the habitual places of a user, the habitual places of a user being the places where the user spends most of his/her time. In some embodiments, historical location information of a user is accessed, and a plurality of visit points are identified based on the historical location information. The plurality of visit points is clustered into a plurality of clusters. Each one of the clusters is then associated with a habitual place of the user. When the server receives, from a client device associated with the user, current location information of the user, the server identifies a current location of the user based on the current location information, and, if the current location of the user is in a neighborhood of one of the clusters, determine that the user is at the habitual place associated with the cluster.

Abstract: Embodiments of the present disclosure provide a method performed in a network exposure node. The method comprises establishing a connection between a first terminal device and a Message Queuing Telemetry Transport for Sensor Network, MQTT-SN, gateway, facilitating subscription of the first terminal device to a topic via the MQTT-SN gateway and facilitating data publishing of a second terminal device for the topic towards the first terminal device via the MQTT gateway.

Abstract: Systems and methods are disclosed for providing a cyber resilience rating. A method can include obtaining a plurality of entity indicators. The method can include determining a peer group of entities for the entity based on the entity indicators. The method can include obtaining a plurality of loss event records for the peer group. The method can include executing, based on the loss event records, a plurality of Monte Carlo simulations to generate loss simulation data. The method can include identifying, based on the loss simulation data, an expected probability value. The method can include providing a risk factor score indicative of a cyber security risk of the entity based on the identified expected probability value. The method can include providing a cyber resilience rating for the entity based on a combination of the risk factor score, a fortitude factor score, and a governance factor score.

Abstract: While operating in a first mode, a computing device transmits, to playback devices of a synchrony group, (i) media content and (ii) respective playback timing information for synchronous playback of the media content. After a first playback device with a different capability than at least one other playback device of the synchrony group has joined the synchrony group, the computing device begins to operate in a second mode for causing one or more of the playback devices of the synchrony group to modify playback of the media content based on a respective playback device capability. While operating in the second mode, the computing device (i) determines a modified sample rate for the first playback device to maintain synchrony of playback of the media content between the playback devices of the synchrony group, and (ii) causes the first playback device to play back the media content at the modified sample rate.

Abstract: Systems and methods for federated secure vocabulary learning. The method may include communicating, by a first client network and a second client network and to a global federation terminal, a first set of encrypted tokens and a second set of encrypted tokens. The method may further include generating, by the global federation terminal, a consolidated vocabulary based on the first set of encrypted tokens and the second set of encrypted tokens. The method may include determining, a first set of weights and a second set of weights for the consolidated vocabulary. The method may include receiving by the global federation terminal the first set of weights and the second set of weights. The method may further include aggregating the first set of weights and the second set of weights. The method may further include distributing, to the first client network and the second client network, an aggregated set of weights.

Abstract: Upon detecting an event indicating enabling of security sensitive functionality of an electronic device, a value previously unknown to the electronic device is obtained and the current content of the data storage to a new current content of the data storage is updated according to an updating function based on the current content of the data storage and the value, wherein, without privileged access, the current content of the data storage can only be updated using the updating function. The value is further obtained in a management module and an expected new current content of the data storage is determined in the management module according to the updating function based on known original content of the data storage and the value. Upon determining that the new current content of the data storage differs from the expected new current content of the data storage, a validation module generates a security notification.

Abstract: A gateway for connection to a host processor and multiple slaves, which are organized in a point-to-point (P2P) topology, is provided. The gateway has an independent channel for each of the slaves, and the gateway can receive multiple control signals, each including at least one control signal for a particular predetermined slave from the multiple slaves, from the host processor. The host processor determines whether the slaves for which the at least one control signal has been received are in an operational state; and to simultaneously output the control signals received from the host processor to the slaves for which the at least one control signal has been received only when all of the slaves for which the at least one control signal has been received are in the operational state.

Abstract: A system includes a memory and a processor. The memory stores classification models that indicate a data classification to apply to data columns of one or more databases. The processor is configured to periodically access one or more databases and determine that a data table has been newly created or modified. The processor is further configured to determine whether a data column of the data table has an existing data classification, and in response to determining that the data column does not have an existing data classification, determine from the plurality of classification models a particular classification model to use for the data column. The processor is further configured to send instructions to a classification server to apply a particular data classification of the particular classification model to the data column in the classification database.

Abstract: A non-transitory computer-readable storage medium stores one or more programs for execution by one or more processors of a computer system communicatively coupled with a manufacturing tool through one or more networks. The one or more programs include instructions for sending a series of frames showing data for the manufacturing tool to a client device for display. The client device is remote from a manufacturing facility in which the manufacturing tool is to be disposed. The one or more programs also include instructions for adjusting a bandwidth for one or more frames of the series of frames in response to receiving, from the client device, an indication of a user interaction with the client device. The instructions for sending the series of frames include instructions for transmitting, after receiving the indication, the one or more frames with the adjusted bandwidth to the client device for display.

Abstract: In a network communications environment supporting realtime communications between respective network nodes of a user and other communicants in virtual areas each of which is associated with its own respective set of communicant members, a graphical user interface is provided in connection with the user's network node. The graphical user interface includes controls for establishing presence in respective ones of the virtual areas, managing realtime communications with other communicants in respective ones of the virtual areas, and presenting different views of communicants associated with the network communications environment.

Abstract: A communication system includes a vehicle including a control device configured to store a control program, a terminal configured to give a notification about predetermined information, and a server configured to communicate with the vehicle and the terminal. The server is configured to transmit update data for the control program. The processor is configured to reduce a data amount of information to be transmitted to the terminal about a transmission status of the update data when the server transmits the update data to the vehicle via the terminal, as compared to a data amount of information to be transmitted to the terminal about the transmission status when the server transmits the update data to the vehicle without intermediation of the terminal.