Abstract: In order to provide a technology, when an access having the possibility of a threatening factor according to an access failure is detected, for collecting information about the access to intuitively display the route of the threatening behavior on an interface that outputs the server-terminal connection network, and directly replaying the threatening behavior to intuitively identify the information on the access and easily identify a cause of the threat, a method for visualizing a route and a behavior of a user by linking a security threat and a security kernel of a server-terminal connection network according to one embodiment of the present invention includes: an access detection step of setting a plurality of terminals, servers accessible from the terminals, and communication processing devices between the terminals and the servers as nodes, and detecting an attempt to access one server from one terminal in a server-terminal connection network including a route on the network connecting the set nodes as li

Abstract: The disclosed technology relates to a network agent for reporting to a network policy system. A network agent includes an agent enforcer and an agent controller. The agent enforcer is configured to implementing network policies on the system, access data associated with the implementation of the network policies on the system, and transmit, via an interprocess communication, the data to the agent controller. The agent controller is configured to generate a report including the data and transmit the report to a network policy system.

Abstract: A method, system, server, and software application provide verification of file integrity. Embodiments include determining for a byte array representing a file, whether a size of the file is larger than a threshold size value. A first predetermined section of the byte array, a second predetermined, and a third random section of the byte array is selected. A first hashing of the file is performed. A first hash value is generated of the first and second predetermined sections of the byte array and the third random section of the byte array. A second hashing of the file is performed to determine whether a second hash value that matches the first hash value. A determination is made that the file has been tampered with in the event the second hash value does not match first hash value.

Abstract: A method for creating a flow profile is provided. The method identifies a first plurality of flow measurements, each of which corresponding to one of a plurality of flows exchanged between a computing entity and a service during a first time period. The method, for each of a first plurality of buckets each of which has a pair of lower and upper bounds, increments a counter of the corresponding bucket for each of the plurality of flow measurements that falls within the pair of bounds of that bucket. The method generates a second plurality of buckets by merging and splitting at least some of the first plurality of buckets, identifies a second plurality of flow measurements for the computing entity during a second time period, and distributes these measurements into the second plurality of buckets. The method generate the flow profile by aggregating the first and second pluralities of buckets.

Abstract: This disclosure relates to decentralized computing networks, architectures and techniques for collecting, analyzing, and processing data over multiple channels. A decentralized computing network comprises a plurality of computing nodes, each of which is dedicated to analyzing and processing events for a particular channel corresponding to a geographic region. Each node of the decentralized computing network can operate independently to process channel analysis data for a corresponding channel. The decentralized configuration of the nodes enables efficient processing of data collected over large geographic areas, increases the reliability of the system, and facilitates easy scaling of the system. Other embodiments are disclosed herein as well.

Abstract: A method for guiding a smart device to connect to a wireless network includes that the smart device sends a device identifier (ID) and a cloud service address that are of the smart device to a control terminal. The control terminal obtains, from a corresponding cloud server based on the received device ID and the cloud service address, network configuration information for the smart device to connect to the wireless network, determines, based on the network configuration information, a management application that is of the smart device and that is provided by a manufacturer, and then downloads the management application. After the download is complete, the control terminal sends the obtained network configuration information to the management application. The management application uses the network configuration information to guide the smart device to connect to the wireless network.

Abstract: A method performed by a co-ordination network entity in a communications network includes transmitting a request message to a network registration entity in the communications network for identification information for a plurality of candidate network entities in the communications network capable of performing collaborative learning, and receiving identification information for the plurality of candidate network entities from the network registration entity. The method further includes initiating, at one or more network entities of the plurality of candidate network entities, training of a model using a machine-learning algorithm as part of a collaborative learning process.

Abstract: A resource allocation method for a cloud environment includes steps performed by one or more servers. These steps include: obtaining an initial resource requirement, generating a first deployment parameter set according to the initial resource requirement by a first prediction model, configuring the cloud environment according to the first deployment parameter set by a resource allocator, obtaining and inputting the requests to a machine learning model in the cloud environment and generating a real resource requirement, generating a predicted resource requirement at least according to the real resource requirement by a second prediction model, when detecting that the cloud environment is in a busy state according to the predicted resource requirement by the resource allocator, generating a second deployment parameter set according to the real resource requirement by the first prediction model; and reconfiguring the cloud environment according to the second deployment parameter set by the resource allocator.

Abstract: A computer-implemented method is disclosed. The method includes receiving a request from a client device for a field value information in a view of a web client application that includes a web browser application. The method further includes generating a real value of the field value information that includes field value characters arranged in an original order, generating elements of the web browser application that includes several random characters and the field value characters, and assigning and positioning unique identity numbers within the elements. The method also includes arranging the elements in a random order different than the original order of the field value characters to form a protected text string, providing the protected text string and a protected rendering rule for rendering to the web browser application. The protected rendering rule causes the web client application to display the field value information for the intended user.

Abstract: Next generation network architectures enable instantiation of network slices in which traffic may be transported via one or more virtual networks overlaying the physical network infrastructure. Multiple of such network slices may share a resource of a particular network function, such as a bandwidth, switching capacity, computing capacity and/or storage capacity of the network function. It may be desirable to provide guarantees on the minimum resource availability of the shared resource per network slice. Accordingly, a slice resource distribution function (SRDF) may be provided which may be configured manage the resource utilization of the shared resource which may safeguard guarantees on the minimum resource availability per network slice.

Abstract: A method is disclosed. The method includes receiving, by an access control server, an authentication request message comprising a credential or a token from an access device, after the access device receives the credential or the token from a portable device of a user. The method also includes responsive to receiving the authentication request message, transmitting, by the access control server, a challenge message to a user device associated with the user; generating, by the access control server, an authentication indicator. The method also includes transmitting, by the access control server, an authentication response message including the authentication indicator to the access device.

Abstract: Code may be dynamically routed to computing resources for execution. Code may be received for execution on behalf of a client. Execution criteria for the code may be determined and computing resources that satisfy the execution criteria may be identified. The identified computing resources may then be procured for executing the code and then the code may be routed to the procured computing resources for execution. Permissions or authorization to execute the code may be shared to ensure that computing resources executing the code have the same permissions or authorization when executing the code.

Abstract: Aspects of the disclosure relate to enhanced processing systems for providing dynamic driving metric outputs using improved machine learning methods. A computing platform may receive sensor data from vehicle sensors. The computing platform may generate a pattern deviation output corresponding to an output of a sensor data analysis model, an actual outcome associated with a lowest TTC value, and driving actions that occurred over a prediction horizon corresponding to the pattern deviation output. The computing platform may cluster the pattern deviation outputs to maximize a ratio of inter-cluster variance to intra-cluster variance. The computing platform may train a long short term memory (LSTM) for each cluster, and may verify consistency of the pattern deviation outputs in the respective clusters.

Abstract: A system and method for performing a secure operation on a vehicle, such as to re-key a vehicle, include transmitting, from a computing device such as a service tool, a service tool request to an access management server over a wide area network, receiving over the wide area network, at the service tool, a secure service response from the access management server upon a verification of the service tool request, the secure service response containing a secure payload, and transmitting the secure payload to secure controller of a specific vehicle being serviced over a vehicle communication interface regardless of whether the service tool is connected to the wide area network.

Abstract: Techniques are provided for generating security response recommendations. In one embodiment, the techniques involve receiving scoring functions, a logical operator selection, a security graph, and external threat intelligence, generating a search pattern based on the scoring functions and the logical operator selection, evaluating the search pattern against a selected node of the security graph to identify a potential security threat represented by the security graph at the selected node, and generating a recommendation based on the evaluation and the external threat intelligence.

Abstract: This application relates to the field of communications technologies, and discloses a network distribution method and system. A first electronic device sends a first probe request, and a second electronic device sends a first probe response after receiving the first probe request. The first electronic device establishes a first connection to the second device by using temporary networking data in the first probe response. The second electronic device transmits network distribution data of a master access point to the first electronic device through a temporary network of the first connection. The first electronic device and the second device then establishes a second connection through the temporary network in an encrypted manner. Therefore, network security of the first electronic device and the second electronic device is high.

Abstract: Systems, methods, and devices for verification of an immunization status of an individual and for secure data portability are provided. A system for verifying an immunization status of an individual includes a verification device, a vault computing device, and an immunization record database server. The verification device includes a web terminal configured to send an immunization status request including identifying data about the individual. The vault computing device receives the immunization status request and generates and sends an immunization record request including an insurance plan number corresponding to the individual. The immunization record database server has access to an immunization record database and retrieves immunization record data from the immunization record database using the insurance plan number and sends the immunization record data to the vault computing device.

Abstract: Devices, methods, and non-transitory program storage devices are disclosed to enable the automatic establishment of a secure audio/video data streaming connection between electronic devices. For example, a first electronic device may enter into a first state of a peer device advertising protocol, and then, based on a determination that the first electronic device meets a first set of device state criteria (e.g., including at least an orientation state criterion), the first electronic device may enter into a second (e.g., enhanced) state of the peer device advertising protocol. In response to detecting a presence of a second electronic device in its proximity, the first electronic device may connect to the second electronic device via a secure peer-to-peer connection protocol and then send one or more images captured by a first image capture device of the first electronic device to the connected second electronic device via the secure wireless peer-to-peer connection protocol.

Abstract: Device fingerprinting is provided for ultra-wide band (UWB) communications. A wireless receiver receives wireless signals including an UWB packet sent from a transmitter. Channel impulse response (CIR) data is extracted from the UWB packet. A device fingerprint of the transmitter is created according to the CIR data, the device fingerprint being representative of physical properties of the wireless signals of the UWB packet. The transmitter is authenticated by the receiver based on the device fingerprint.

Abstract: Techniques for chatbot utterance routing in a provider network include jointly training a service classifier and a plurality of auxiliary classifiers based on a mixed service set of labeled chatbot utterance training examples to yield a trained service classifier. When a particular chatbot user utterance is received, the trained service classifier can be used to determine if the utterance is in-scope or out-of-scope, and if in-scope, to determine which service of a set of services in the provider network to which to route the utterance for further processing. By jointly training the service classifier with the auxiliary classifiers, the accuracy of the in-scope/out-of-scope determination by the trained service classifier is improved as well as its accuracy in routing the utterance to the appropriate service for processing the utterance as intended by the user.