Abstract: A system can include a certificate application programming interface (API) device that is operable to receive, via an application programming interface (API), an enrollment request for the at least one computerized device. The certificate API device can also generate, via the API, an enrollment package and an end entity certificate package for the at least one computerized device by obtaining the enrollment package and the end entity certificate package from a certificate management service (CMS). The certificate API device can also transmit, via the API, the enrollment package and the end entity certificate package to the at least one computerized device. The system can also include the CMS that is operable to provide the enrollment package and the end entity certificate package to the certificate API device.

Abstract: The disclosure notably relates to a computer-implemented method for cybersecurity compliance assessment. The method comprises obtaining one or more documents containing a description of an IT infrastructure, or of an organization or project relying on an IT infrastructure and a plurality of requirements, including a set of cybersecurity requirements. The method further comprises selecting, for each requirement, one or more respective chunks each of a respective document. The method further comprises assessing, for each requirement, a level of compliance of the description with the requirement, the assessing being based on the requirement and on the selected one or more respective chunks. The assessing is performed by an assessing module comprising a plurality of LLMs configured to cooperate for computing the level of compliance. The method further comprises generating digital data that represents a result of the assessment. Such a method improves cybersecurity compliance assessment.

Abstract: In one embodiment, a method includes submitting, by a client computing device, an authentication request including authentication credentials of an insurance brokerage to access a secure statement website of a carrier; displaying, on the client computing device and in response to an authentication approval from the carrier, a multi-factor authentication (MFA) user interface of the carrier on a display of the client computing device; determining that the MFA user interface is currently being displayed on the display of the client computing device; in response to the determination, automatically displaying an MFA user interface of an insurance brokerage accounting system along with the MFA user interface of the carrier; determining that an MFA code specific to the authentication request has been received from the carrier; and displaying, in the MFA user interface of the insurance brokerage accounting system, the MFA code specific to the authentication request.

Abstract: Provided is a system and method which perform an antivirus scan of incoming files via a file management application of a file system. Infected files can be prevented from being stored to the file system. In one example, the method may include receiving, via a first application contained in a first data container, a data file that is uploaded for storage to a file system, storing the data file in a temporary storage, transmitting a location of the data file in the temporary storage to a second application contained in a second data container, and receiving, via the first application contained in the first data container, a response from the second application contained in the second container, indicating results of a security scan performed on the data file.

Abstract: Provided are a method and apparatus for compiling a mirror image, a nonvolatile readable storage medium, and an electronic device. The method includes: whether a compilation operation of a platform firmware resilience project exists in a compilation script is recognized through a macro definition in a case of compiling a project of a board manager controller, so as to obtain a recognition result; a compilation code configured to generate a PFR mirror image is executed in a case that the recognition result indicates that the compilation operation of the PFR project exists, so as to generate the PFR mirror image; and a data check is performed through the PFR mirror image in a case of running each item in the project of the board manager controller.

Abstract: In some examples, a system creates a requirement including EPG selectors representing EPG pairs, a traffic selector, and a communication operator; determines that EPGs in distinct pairs are associated with different network contexts and, for each pair, which network context(s) contains associated policies; creates first data representing the pair, operator, and traffic selector; when only one network context contains the associated policies, creates second data representing a network model portion associated with the only network context and determines whether the first data is contained in the second data to yield a first check; when both network contexts contain the associated policies, also creates third data representing a network model portion associated with a second network context, and determines whether the first data is contained in the second and/or third data to yield a second check; and determines whether policies for the pairs comply with the requirement based on the checks.

Abstract: Access point network equipment has communication ports that allow communications with other network components and a cloud based AP device management system having an Auto Configuration Service (ACS). Communications cables coupled to ports can be easily removed and replaced with unauthorized devices that have access to the network creating a security breach. When an authorized cable or plug is removed from a port, a link down event can be detected by tamper detection software running on the access point network equipment and the link down event information can be transmitted to the cloud/Map service. When a link down events is detected, the cloud/ACS transmits instructions to the access point network equipment to perform various possible security actions to protect the network.

Abstract: Techniques for load balancing secure network traffic are disclosed. A system, process, and/or computer program product for load balancing secure network traffic includes monitoring network traffic for each of a plurality of branches for an enterprise network, and performing load balancing for the plurality of monitored branches to a plurality of security processing nodes (SPNs) executing in a cloud-based security service using a network load balancer (NLB) in communication with a plurality of Network Processing Nodes (NPNs), the plurality of monitored branches being distributed to the plurality of SPNs via a plurality of tunnels.

Abstract: The description relates to automated binary code summarization. In one example, a binary code summarization tool receives binary code and combines the received binary code with natural language in a prompt for a large language model (LLM). The binary code summarization tool receives a semantic summarization from the LLM relating to the received binary code and evaluates the new semantic summarization for malicious functionality in the received binary code.

Abstract: Various examples in accordance with the present disclosure provide example methods, systems, and apparatuses for data encryption.

Abstract: A personal artificial intelligence (AI) system may be used to conduct business with one or more entities. The personal AI system may automatically replicate security rules from another AI system to provide initial security rules and may adjust the initial security rules based on information about the user to generate revised security rules. The rules adjustments may also be based on the entities with which the user does business. An AI firewall may be generated to control access to the personal AI system by a second AI system, with which business may be conducted. To permit interactions with the second AI system, the AI firewall may require that the second AI system provide the personal AI system with data relating to previous transactions between the user and the operator of the second AI system. The data may include the monetary amount of each of multiple recent transactions.

Abstract: Techniques are described herein for rotating a credential using a process automation tool. A first process automation tool can use an application programming interface (API) call to request an updated credential from an external credential manager to replace an existing credential stored in an internal credential storage system. The first process automation tool can obtain the updated credential from an output of the API call. The first process automation tool can access the existing credential and replace the existing credential with the updated credential. Subsequently, a second process automation tool can access the internal credential storage system to obtain the updated credential. The second process automation tool can perform an authentication process to provide access to a protected computing resource.

Abstract: An Amazon Web Services (AWS) temporary role assumption access credentials invalidation system and process for invalidating AWS temporary role assumption access credentials using session policies and session tags are disclosed. The AWS temporary role assumption access credentials invalidation system is configured to revoke the temporary credentials associated with an AWS temporary role which a user no longer needs and also ensure that a confused user does not inadvertently use an incorrect set of temporary credentials. By invalidating AWS temporary role assumption access credentials using session policies and session tags, inadvertently assumed credentials can also be immediately invalidated. Furthermore, the AWS temporary role assumption access credentials invalidation system revokes temporary credentials when a user is finished with them. This ability to immediately invalidate any issued credential provides a much more secure environment for an organization.

Abstract: A system and method for authenticating users of a data processing platform stores a mapping of a unique user platform identifier to multiple user identity provider identifiers associated with multiple realms for a same user. In some examples, the method includes receiving a request from a client device to establish an access session to perform one or more actions on data of the data processing platform and receiving, from at least one of the first external identity provider of the first realm or the second external identity provider of the second realm, a user identity provider identifier associated with the request. In certain examples, the method includes granting permission to perform the one or more actions on the data of the data processing platform based at least in part on the received user identity provider identifier.

Abstract: The present invention describes a method for secure communication between two endpoints comprising a first endpoint connected with a request collector using a first poll-pull communication link, wherein the first endpoint authenticates with the request collector. A second endpoint connects with the request collector using a second poll-pull communication link and authenticates with the request collector. Once both endpoints are authenticated, the first endpoint prepares a first encrypted communication by encrypting a communication, encapsulates the first encrypted communication in a first IP packet and sends the first IP packet to the request collector using the first poll-pull communication link. The request collector receives the first IP packet and extracts and decrypts the first encrypted communication to obtain the communication and prepares a second encrypted communication by encrypting the communication and encapsulates the second encrypted communication in a second IP packet.

Abstract: Implementations of the present disclosure are directed to star distributed key generation (SDKG) between computing devices for private key sharing in cryptographic networks, where a computing device is the center of a star graph of multiple computing devices and functions as a 2-out-of-3 DKG protocol that can is robust against multiple types of corruptions.

Abstract: Systems and methods are described for improving access control for a software application. A cloud platform may include a software application and an authorization sidecar. When a user attempts to access a resource, of the software application, that is associated with a first security level, the authorization sidecar performs authorization on the user based on a general authorization procedure and a specific authorization procedure. The user has access to the resource associated with the first security level after being authorized. When a user attempts to access a resource, of the software application, that is associated with a second security level, the authorization sidecar performs authorization on the user based on the general authorization procedure. The user has access to the resource associated with the second security level after being authorized.

Abstract: A first mobile device displays a visual representation of at least a portion of a basketball court and receives user input indicating a sequence of actions to be performed on the basketball court by a player. The first mobile device encodes the sequence of actions into a data structure and sends the data structure to a server to cause the server to initiate a notification to at least at a second mobile device. The second mobile device receives the data structure and displays the visual representation of the basketball court concurrently with at least one user interface element corresponding to at least one action in the sequence of actions. Placement of the at least one user interface element relative to a basketball hoop is determined, at the second mobile device after receipt of the data structure, based at least in part of a profile of the player.

Abstract: A method for disabling a device associated with a virtual identity may include receiving, from the device, a request to use the virtual identity, where the request that may include a passcode guess and a device identifier. The method may also include determining that the passcode guess does not authorize use of the virtual identity and incrementing a number of incorrect passcode guesses received within a time interval. The method may additionally include determining that the number of incorrect passcode guesses received within the time interval is greater than or equal to a threshold. The method may further include storing an indication that subsequent requests associated with the device identifier should not authorize use of the virtual identity.

Abstract: Systems and methods for policy based privileged remote access in zero trust private networks. Various embodiments include receiving a request to an end system; determining available end systems based on one or more criteria associated with the request, wherein the one or more criteria are analyzed based on policy; and providing access to the end system based on the one or more criteria, wherein the access includes remote pixel rendering protocols integrated with a zero trust architecture.