Abstract: On-demand systems and methods are provided to manage locally-stored on-demand content. A user's equipment controls the deletion of and/or access to on-demand content from a local storage device based on constraining criteria that may include rental conditions, dynamic factors, and keys.

Abstract: A method, a computing device, and a non-transitory machine-readable medium for detecting malware attacks. In one example, an agent implemented in an operating system detects an overwrite in which an original data component is overwritten with a new data component. The agent computes a plurality of features associated with the overwrite, the plurality of features including an original entropy corresponding to the original data component, a new entropy corresponding to the new data component, an overwrite fraction, and a set of divergence features. The agent determines whether the new data component is encrypted using the plurality of features.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for implementing a privacy manager are disclosed. In one aspect, a method includes the actions of receiving, from a client device, an indication of a first setting of the client device. The actions further include receiving, from the client device, an indication of a type of data that the client device is prepared to transmit. The actions further include, based on the first setting and the type of data, generating an instruction to adjust the first setting or a second setting of the client device. The actions further include, before the client device transmits the data, providing, for output to the client device, the instruction to adjust the first setting or the second setting of the client device.

Abstract: In an approach for computing trade-offs between privacy and accuracy of data analysis on building a learning model, a processor receives a dataset for training a model. The dataset includes one or more pre-identified sensitive data fields. The processor determines a weight of each sensitive data field for the model. The processor evaluates resource cost of applying a privacy preservation technique to the one or more pre-identified sensitive data fields. The processor identifies correlation among the sensitive data fields. The processor presents a comparison of options for training the model, in terms of tradeoffs of accuracy for training the model and the resource cost of the privacy preservation technique.

Abstract: Mechanisms are provided for detecting abnormal system call sequences in a monitored computing environment. The mechanisms receive, from a computing system resource of the monitored computing environment, a system call of an observed system call sequence for evaluation. A trained recurrent neural network (RNN), trained to predict system call sequences, processes the system call to generate a prediction of a subsequent system call in a predicted system call sequence. Abnormal call sequence logic compares the subsequent system call in the predicted system call sequence to an observed system call in the observed system call sequence and identifies a difference between the predicted system call sequence and the observed system call sequence based on results of the comparing. The abnormal call sequence logic generates an alert notification in response to identifying the difference.

Abstract: A system and method for automatically updating biometric data for a user by preferably retaining an ongoing digital collection of images/biometric captures/IOT (“Internet of Things”) captures taken over the life of the user. Changes in appearance of the user due to age, health, facial hair, hair color, hair length and many other evolutionary changes are automatically captured and contribute to the learning set. Accordingly, the system itself gets smarter and faster with every subsequent authentication. In one non-limiting embodiment, a target of the most recent 500 captures are retained, and tuning may suggest a greater number of captures should or could be used. Preferably, with each new capture the oldest capture in the ongoing digital collection is automatically deleted by the system.

Abstract: Methods and systems for filtering content in reconstructions of native data in assets. Specifically, the methods and systems extract telemetry data from native game data. The methods and systems then identify Personally Identifiable Information (“PII”) in the telemetry data and determine a masking operation to perform on the PII. The methods and systems then generate for presentation, in a user interface, reconstructed asset data based on the telemetry data, wherein the PII is modified in the reconstructed asset data based on the masking operation.

Abstract: Systems, computer program products, and methods are described herein for secure access control using dynamic resource replication. The present invention is configured to electronically receive, from a computing device of a user, a request to generate a resource access path to access a resource; determine one or more resource requirements associated with the resource; determine an authentication level associated with the user; initiate a resource replication engine on the one or more resource requirements and the authentication level associated with the user; determine, using the resource replication engine, that the one or more requirements and the authentication level associated with the user meets one or more conditions for a replication process; and generate, using the resource replication engine, the resource access path and a plurality of replicate resource access paths.

Abstract: A method of block chain based data protection may comprise receiving a user block chain instruction to record a address-identified memory location at which a dataset field value containing sensitive personal information is stored pursuant to a customized data integration process modeled via a graphical user interface, creating a block chain associated with the dataset field value, receiving an identification of the address-identified memory location from a customized data integration process remote execution location, and creating a first block storing the identification of the address-identified memory location within the block chain.

Abstract: Techniques are shown for key management using a traceable key block-chain ledger involving creating a cryptographic key at a key source, generating a key block on a block-chain ledger corresponding to the cryptographic key, and securely modifying the key block to include metadata describing the key source. The techniques also involve performing a first key transaction with the cryptographic key, generating a first transaction block on the block-chain ledger corresponding to the first key transaction with the cryptographic key, linking the first transaction block to the key block and securely modifying the first transaction block to include metadata describing the first key transaction with the cryptographic key.

Abstract: A method may include receiving a registration request at a server of a consent management platform from a content-presentation device, and using an authentication certificate in the request to establish a secure communicative connection. The server may generate: a global ID (GID) from information received over the secure connection; a device-based device record for the device, and including the GID and a unique address indicator; and a cryptographically-signed token. The GID, device record, and token may be transmitted to the device. The unique address indicator may be associated with consent packages having features of a media distribution system that require user consent to associated agreements for activation on the device. The server may generate a server-based device record duplicating the device-based device record, and including the consent packages and indicators of consent agreement status initialized to undeclared. The server may store the server-based device record in a flat database.

Abstract: A method and system for planning and running video-on-demand (VOD) advertising includes a planner for planning advertising campaigns and an ad selector for running selected advertisements from selected ones of the campaigns. The campaigns are associated with household demographic classifications, video content category categories, household geographic locations, and/or video viewing times. In response to a viewer requesting a video, the selector selects the campaigns corresponding to the demographic classification associated with the viewer, the content category of the requested video, the geographic location associated with the viewer, and/or the viewing time at which the requested video is viewed. The demographic classification is determined by using an identifier of the viewer's set-top-box. The selector may select the campaigns corresponding to the content categories of the requested video. The content categories are determined by using an identifier associated with the requested video.

Abstract: An embodiment of the present invention is directed to delivering an entitlements model that scales to both mid-frequency and low-latency use cases. The innovative solution may be distributed in nature and able to operate in low priority threads alongside the main logic of the software. An embodiment of the present invention may be implemented as a software module with APIs for ease of adoption.

Abstract: A system and method for executing and recording transactions for a key in a blockchain. A method includes creating a smart contract on receiving a request to order a key on lease for a first period of time. The method further includes determining an availability of the key and determining an availability of digital tokens in an account of the user. The method also includes executing the smart contract for the first period of time by executing a first transaction using the digital tokens and recording the executed first transaction and the executed smart contract in a block of a block chain to provide the key on lease.

Abstract: Plurality of users share a common key while permitting change of members sharing the common key and computational complexity required for key exchange is reduced. Ri and ci are computed based on a twisted pseudo-random function in a first key generation step. sid is generated based on a target-collision resistant hash function and (sid, R?, R?) is transmitted to communication devices Ui in a session ID generation step. T1 and T? are computed based on a pseudo-random function in a representative second key generation step. Tj is computed based on the pseudo-random function in a general second key generation step. k? is computed based on the twisted pseudo-random function and T?j is computed with respect to each j in a third key generation step. K1l and k1 are computed in a first session key generation step. A common key K2 is generated based on the pseudo-random function in a second session key generation step.

Abstract: Disclosed herein are embodiments of systems, methods, and products comprise a computing device, which allows a device to be used in different classification levels by powering the device down and booting to a different classified level without the need to switch hard drives. The disclosed software shield and persona switcher (Shielder) module provides independent application environments (personas) for separate security domains while allowing fast transition between personas. Shielder module supports multiple security classification via a minimal system storage partitioning. Shielder module allows efficient collection and reallocation of memory and persistent storage according to need and priority. Shielder module provides secure management of communication media by directing the system communication according to the security profile of the active persona.

Abstract: Aspects of the disclosure relate to voice biometric authentication in a virtual assistant. In some embodiments, a computing platform may receive, from a user device, an audio file comprising a voice command to access information related to a user account. The computing platform may retrieve one or more voice biometric signatures from a voice biometric database associated with the user account, and apply a voice biometric matching algorithm to compare the voice command of the audio file to the one or more voice biometric signatures to determine if a match exists between the voice command and one of the one or more voice biometric signatures. In response to determining that a match exists, the computing platform may retrieve information associated with the user account, and then send, via the communication interface, the information associated with the user account to the user device.

Abstract: A computer system and method for managing a data request interface. The system includes a memory associated with the data request interface and coupled to a processor. The memory includes processor-executable instructions of the method for managing the data request interface. The method includes: receiving, from a first client device, a first signal including a primary authorization credential associated with a data record and a second signal including a request to generate an alternate authorization credential for use by a software module. The alternate authorization credential is associated with data retrieval constraints. The method includes generating the alternate authorization credential and configuring the data request interface to impose the data retrieval constraints for constraining data operations on the data record upon receipt of the alternate authorization credential.

Abstract: The present disclosure relates to a computer implemented method for verifying a computing device and preferably an operator associated with a security system, wherein the security system is specifically adapted for ensuring that the correct security operator is performing the correct task. The present disclosure also relates to a corresponding security system and a computer program product.

Abstract: Systems, methods, and related technologies for clustering are described. Network traffic is accessed from a network and the network may be associated with a plurality of entities. Behavior associated with each entity of the plurality of entities may be determined. The behavior may be determined based one or more communications associated with each entity. A processing device may be used to determine one or more clusters of entities based on entities having similar behavior. A cluster may comprise one or more entities with similar behavior. One or more anomalies may be determined based on the one or more clusters and storing data associated with at least one of the one or more clusters and the one or more anomalies may be stored.