Abstract: Systems and methods for management of a RAID system of encrypted storage drives are described. In one embodiment, the system may include self-encrypting drives (SEDs), redundant array of independent disks (RAID) chips, a drive interface bridge connecting between one of the RAID chips and a machine host, and a drive command initiator communicatively coupled to the drive interface bridge. In some embodiments, the drive command initiator may be configured to configure the one or more RAID chips in pass-through mode, unlock at least one of the SEDs while the one or more RAID chips are configured in pass-through mode, and upon unlocking at least one of the SEDs, configure the one or more RAID chips to RAID mode and activate a mass storage functionality of the drive interface bridge.

Abstract: Examples described herein include systems and methods for providing push notifications to a third-party application executing on a client device. An example can include encrypting user credentials, generating a callback Uniform Resource Locator (“URL”) with at least a portion of the encrypted credentials embedded into the URL, and requesting notifications from an email service to be provided at the callback URL. Upon receiving a notification at the callback URL, a system component can decrypt the credentials within the URL using a private key and log into the email account using those decrypted credentials. The system component can then generate a push notification based on any changes found in the email account and cause the notification to be delivered to the third-party application on the client device.

Abstract: Example embodiments relate to controlling secured access to electronically provided application functionality or content. An Internet browser executing on a first computing device initiates periodic polling of a paired second computing device associated with a user for measurements of short range communication protocol signal strength of the second computing device and determines that the second computing device is within an authentication distance of the first computing device. The secure Internet browser transmits an authentication request comprising a device identifier of the second computing device.

Abstract: The present invention is directed towards a method and system for remote diagnostics in a Digital Subscriber Line (DSL) set-top box network having a head-end unit and a set-top box having diagnostics software. The diagnostics software stored in the set-top box enables the head-end unit to remotely query the set-top box about the current condition of the set-top box and, as a result, reduces the necessity of service calls and/or shipping charges that would otherwise be required. The diagnostics software generates data is response to a set-top box identification request, a software version request, a check television connections request, a check I/O ports request, a check HPNA networking request, a check USB request, a check system ICs request, a check DSL connection request, a check error codes request, a read warranty clock request, a read hours of operation request, and a perform default test request received from the head-end.

Abstract: A vehicle cyber-attack detection system includes at least one first tier security module coupled to at least one onboard system of a respective vehicle and being configured so as to receive system log data generated by the at least one onboard system of the respective vehicle. The first tier security module extracts extracted features from the system log data with natural language processing and includes a first cyber-attack anomaly detection module that identifies a first cyber-attack based on system entropy measurements determined from the extracted features, and a second cyber-attack anomaly detection module that includes a deep learning component that identifies a second cyber-attack based on classification of the extracted features. A cyber-attack alert module is coupled to the first tier security module for generating a notification of one or more of the first cyber-attack and the second cyber-attack to effect cyber-attack diagnostics and remediation by vehicle personnel.

Abstract: An electronic device, an image processing method thereof, and a non-transitory computer readable recording medium are provided. The image processing method for the electronic device includes receiving an image signal; extracting, by a middleware layer, an entitlement management message (EMM) from the image signal; transmitting the extracted EMM to a web browser based application of an application layer; confirming, by the application, a user authority using the extracted EMM; extracting, by the middleware layer, a control word (CW) if the authority for the image signal is confirmed; and descrambling the image signal using the extracted control word.

Abstract: In one embodiment, an apparatus comprises a multiplier circuit to: identify a point multiply operation to be performed by the multiplier circuit, wherein the point multiply operation comprises point multiplication of a first plurality of operands; identify a point add operation associated with the point multiply operation, wherein the point add operation comprises point addition of a second plurality of operands, wherein the second plurality of operands comprises a first point and a second point, and wherein the first point and the second point are associated with a first coordinate system; convert the second point from the first coordinate system to a second coordinate system; perform the point add operation based on the first point associated with the first coordinate system and the second point associated with the second coordinate system; and perform the point multiply operation based on a result of the point add operation.

Abstract: The present invention relates to a method for providing encrypted data on a client, a cloud or the like, performed in a memory available to a computation device comprising the steps of a) Providing for each user a user specific encryption key for encrypting user-specific plaintext, b) Computing a common decryption key with a pre-determined function using the user specific encryption keys as input for said function, and wherein the common decryption key is computed based on at least two product groups of the same prime order, c) Encrypting each user-specific plaintext with the corresponding user-specific encryption key resulting in user-specific ciphertexts, d) Computing a common ciphertext with said function using the user-specific ciphertexts as input for said function, e) Providing the common ciphertext and the common decryption key for decryption, preferably to a user, wherein step c) is performed such that encryption is homomorphic in the user-specific plaintext as well in the user-specific encryption key

Abstract: In certain aspects, an apparatus comprises a plurality of PUF cells. Each PUF cell comprises a first transistor in series with a first loading resistive component and coupled to a common cross-coupled node and cross-coupled to a complementary common cross-coupled node, a second transistor in series with a second loading resistive component and coupled to the complementary common cross-coupled node and cross-coupled to the common cross-coupled node, a first pass-gate and a second pass-gate coupled to a bit line and the complementary bit line, respectively. The apparatus further comprises an auxiliary peripheral circuit coupled to the bit line, the complementary bit line, the common cross-coupled node, and the complementary common cross-coupled node. During activation, the selected PUF cell, together with the auxiliary peripheral circuit, forms a cross-coupled inverter pair and outputs a physical unclonable function value.

Abstract: Techniques for implementing high integrity logs for distributed software services are provided. According to one set of embodiments, a key management service running on a key server can maintain a secret master key. The key management service can further generate, for each of a plurality of distributed software service instances, a service key that is unique to a current lifecycle of the software service instance, the generating being based on the master key; and transmit the service key to the software service instance, where the service key is used by the software service instance in creating a high integrity log.

Abstract: Disclosed systems and methods for monitoring an execution system of a programming logic controller (PLC), the method comprising: accessing, by a security module, the PLC execution system and dividing the code and data of the PLC execution system into a plurality of program modules; modifying, by the security module, data exchange interfaces of the program modules used for the interaction between the program modules and the resources of the operating system such that said interaction occurs through the security module, while a format of the data being exchanged complies with a format specified by the security module; and monitoring, by the security module, the execution of the PLC execution system, including monitoring the interaction of the program modules of the PLC execution system with each other and with the resources of the operating system.

Abstract: A method of video segment detection within a transport stream of a video asset is provided. Boundaries of candidate video segments of interest (i.e., advertisements, sports highlights, news highlights, content summaries, etc.) within a video asset are detected with a media analysis detector and are separately detected based on statistical models generated from historic transport control event data collected from a population of viewers of the video asset. The above referenced information concerning the candidate video segments of interest is used to identify beginning and end boundaries of selected candidate video segments within the transport stream. A transcoder is provided with parameters corresponding to the selected candidate video segments and performs group of pictures (GOP) and chunk boundary alignment of chunks of the transport stream with the boundaries of the selected candidate video segments. A system and non-transitory computer-readable storage medium are also disclosed.

Abstract: In some examples, a system extracts features from event data representing events in a computing environment, trains ensembles of machine-learning models for respective analytics modules of a plurality of different types of analytics modules, and detects, by the different types of analytics modules using the respective trained ensembles of machine-learning models, an anomalous entity in response to further event data.

Abstract: A data storage device utilized for confirming firmware data includes a flash memory and a controller. The controller is coupled to the flash memory to receive at least one first hash data related to a first firmware data, and it divides the first hash data into a plurality of data groups. The controller sorts the data groups based on a predetermined sorting mechanism to generate a first sorting hash data. The controller includes an efuse region for writing the predetermined sorting mechanism. When the controller determines that a second sorting hash data of a second firmware data is identical to the first sorting hash data or a second hash data of the second firmware data is identical to the first hash data, the second firmware data is allowed to update the controller.

Abstract: A monitoring device manages information regarding a first reception port and information regarding a second reception port in regard to an IP address of a self-device. The monitoring device issues a route certificate corresponding to a first server certificate and a route certificate corresponding to a second server certificate for realizing communication of relatively lower security strength than the first server certificate, and associates the first server certificate with the first reception port and associates the second server certificate with the second reception port. The monitoring device decides, as data for each reception port, a connection URL and a port number of each reception port, transmits the route certificate corresponding to the first server certificate and data for the first reception port to the network device.

Abstract: A method for implementing automatic and scalable log pattern learning in security log analysis is provided. The method includes collecting security logs generated by a computer system. An incremental learning process is implemented to generate a set of log patterns from the collected security logs. The collected security logs are parsed using the set of log patterns.

Abstract: A system for distributed content distribution is presented which enables and facilitates distributed content programming. According to the system, a list of content segments that make up an episode and episode metadata are distributed from server to client. The client uses the list of content segments and the episode metadata to present a streamlined viewing experience to the user, notwithstanding different locations, formats, encoding schemes, and packetization schemes of the content underlying the list of content segments.

Abstract: Content delivery is provided responsive to mediacast content consumer requests by providing personalized mediacasts to each of a plurality of mediacast content consumers. Each of the personalized mediacasts includes a variety of replaceable programming and non-programming content segments and a variety of non-replaceable programming and non-programming content segments. Replacement programming and non-programming content segments may be targeted, for example selected based in part on one or more selection criterion associated with the mediacast content consumer, or provided by the broadcaster or Webcaster. A buffering scheme may be employed to inherently adjust asynchronicity between a broadcast or Webcast and a personalized mediacast. Actual insertion of replacement programming and non-programming content segments may occur upstream of a content consumer device or at the content consumer device.

Abstract: An encoding program causes a computer to execute a process of inputting thereto a CSV file having a plurality of records each including a plurality of item which are separated by a delimiter. The encoding program causes the computer to execute a process of generating an encoded file having encoded data and an encoded dictionary each in which a specific item included in the records of the input CSV file is encoded by word or numerical value. The encoding program causes the computer to execute a process of generating an encrypted file including an encrypted dictionary in which the encoded dictionary is encrypted, from the generated encoded file.

Abstract: A method and system for planning and running video-on-demand (VOD) advertising includes a planner for planning advertising campaigns and an ad selector for running selected advertisements from selected ones of the campaigns. The campaigns are associated with household demographic classifications, video content category categories, household geographic locations, and/or video viewing times. In response to a viewer requesting a video, the selector selects the campaigns corresponding to the demographic classification associated with the viewer, the content category of the requested video, the geographic location associated with the viewer, and/or the viewing time at which the requested video is viewed. The demographic classification is determined by using an identifier of the viewer's set-top-box. The selector may select the campaigns corresponding to the content categories of the requested video. The content categories are determined by using an identifier associated with the requested video.