Abstract: This disclosure provides a user data processing system. A first data processing device in the system generates a first intermediate result, and sends a third intermediate result to a second data processing device. The third intermediate result is obtained from the first intermediate result based on a parameter of a first machine learning model and target historical user data obtained by the first data processing device, and an identifier of the target historical user data is the same as an identifier of historical user data of the second data processing device. The first data processing device further receives a second intermediate result, and updates the parameter of the first machine learning model based on the first intermediate result and the second intermediate result. The second data processing device further updates a parameter of a second machine learning model based on the received third intermediate result and the second intermediate result.

Abstract: A network device may determine that a particular security association (SA) is to be established with a peer network device and that a post-quantum preshared key (PPK) cannot be obtained by the network device. The network device may determine that establishment of quantum-secure SAs is not mandatory for the network device. The network device may generate based on determining that the PPK cannot be obtained by the network device, and based on determining that establishment of quantum-secure SAs is not mandatory for the network device, a pseudo-PPK, and may generate, using the pseudo-PPK, pseudo-PPK authentication information associated with the network device. The network device may generate, using a non-quantum-secure key, non-quantum-secure authentication information associated with the network device.

Abstract: A secure computation system comprises at least five secure computation server apparatuses connected to each other via a network and performs secure computation on a value stored while being secret-shared, and each of the secure computation server apparatuses has a comparative verification part that compares values, which should be the same, received from at least three secure computation server apparatuses and that accepts a received value identical to at least another received value as a correct value.

Abstract: In one aspect, a computerized method for attack generation on a data lake, comprises: for a data lake repository: providing an attack generation mimicry tool; with the attack generation mimicry tool: implementing a reconnaissance phase attack generation; implementing an infiltration phase attack generation on the data lake repository; implementing a hiding and data intelligence collection phase of the attack by hiding from any monitoring or notification system of the data lake repository and surveying the data lake repository to determine what data is worth abusing or exfiltrating from the data lake repository; implementing data gathering phase of the attack that gathers data about other objects, attributes, and relationships in the data lake repository; and implementing the exfiltration of the data or the abuse of the data.

Abstract: Systems and methods for detecting security anomalies in a computing environment. One example system includes an electronic processor configured to receive, via the communication interface, security data for the computing environment and parse the security data to extract a feature set. The electronic processor is configured to apply noise to the feature set to produce a noised feature set and to produce a reduced noise feature set by processing the noised feature set using a neural network trained to remove noise. The electronic processor is configured to compare the reduced noise feature set to the feature set to determine a success score, select a threshold based on the security data, and determine whether the success score exceeds the threshold. The electronic processor is configured to, responsive to determining that the success score does not exceed the threshold, generate a security event based on the security data.

Abstract: Methods, systems, and computer programs are presented for stitching a meta session with an underlying trail fragmented across multiple distributed sessions. One method includes receiving telemetry signals from entities in a session environment that includes at least one identity of a user engaged with applications via respective meta sessions. An underlying trail for each meta session is determined, where the underlying trail is fragmented across two or more sessions with two or more entities. For a first meta session with a first application for the identity of the user, several operations are performed, including correlating a signal hierarchy based on the telemetry signals; constructing, based on the correlated signal hierarchy, a session hierarchy underlying the first meta session distributed across the one or more entities; determining a posture of the first meta session based on the constructed session hierarchy; and enforcing a security policy based on the determined posture.

Abstract: Systems and methods include an IHS (Information Handling System) that is a member of a computing cluster and that is configured to participate in collective management of the cluster, including generating a unique identifier for collective use and identification of the cluster. Cluster management functions of the IHS are configured to determine when the addition of another IHS as a member of the computing cluster requires an update to a cluster identifier that is used to task the computing cluster. When an update to the cluster identifier is required, the cluster management functions generate an updated cluster identifier that is amalgamation of identifiers of each member of the computing cluster and the updated cluster identity is transmitted to cluster members.

Abstract: An architecture is disclosed for submission and recordation of application programmer interfaces (APIs) using non-fungible tokens (NFTs) inserted into a blockchain. The API-NFT pairings are validated by nodes of the network. The system automatically searches for and generate NFTs for APIs and/or intermediate layers on a computer network based on metadata associated with the API and a hash of the API/intermediate layer. The API-NFT pair binding ensures that developers/consumers are ingesting APIs that are secure and do not include malicious rules. Furthermore, performance monitoring of the API is performed using artificial intelligence (AI) and machine learning (ML), including long short term memory (LSTM) neural networks.

Abstract: In one aspect, In one aspect, a computerized method for automatic grading, impact analysis and mapping to the CIA triad, comprising: identifying a value of a plurality of data stores; associating the value back to an attack scenario such that a measure of impact with respect to attack progression or susceptibility now has a pecuniary value and generating a grading score; associating the grading score mapped to Confidentiality, Integrity and Availability (CIA) Triad; associating an attack progression with the pecuniary value and priority; identifying a progression of the attack; determining a time that is available for a response before a damage occurs to a system under attack; determining a stage of the attack in an attack kill chain, wherein for every stage of the attack as the progress happens, associating the pecuniary value and an impact for such a stage; and automatically calculates an overall data threat grade of the system.

Abstract: There is provided an apparatus, method and computer program for a proxy function that causes the apparatus to: receive, from a network repository function, profile information relating to a network function service producer: determine from the profile information whether the network function service producer is able to use an access token for subscribing to a service that indicates a plurality of entities; select a mechanism for requesting an access token for subscribing to a service in dependence on the determination; and request, from the network repository function, a first access token for subscribing to a service on behalf of a first network function service consumer based on the selected mechanism.

Abstract: Systems and methods are disclosed for software security analysis. In certain embodiments, a method may comprise identifying a set of potential security vulnerabilities, comparing the potential vulnerabilities to a catalog identifying elements on a client system, and generating risk mitigation advice based on potential security vulnerabilities matching an element in the catalog. The method may include evaluating a data field of a service request to a third party to determine an expected data type for the field, determining whether the actual data included in the service request matches the expected data type, and quarantining the service request when the actual data does not match the expected data type. The method may comprise operating as a proxy for the service request, including receiving the service request from the client system, evaluating the service request for irregularities, and forwarding the service request to the third party once the irregularities have been addressed.

Abstract: In one embodiment, a method includes generating an application programming interface (API) definition by observing traffic. The API definition is associated with an API definition name and an API specification. The method also includes mounting the API definition with an application and deploying the application by a Continuous Integration/Continuous Delivery (CI/CD) pipeline. The method further includes implementing a runtime API and mapping the runtime API to the API definition.

Abstract: Systems, methods, and apparatuses for migrating secrets from cloud-based secret manager instances to local secret manager instances while preserving an original topology of the cloud-based secret manager instances are provided herein. An example system includes a computer-readable memory containing a local secret manager. The example system also includes a processing device configured to obtain an initial secret management topology from one or more cloud-based secret manager instances, associate each cloud-based secret manager instance with respective geographical locations, and migrate secrets from each respective cloud-based secret manager instance into the local secret manager, organized by the geographical locations, in a final secret management topology that mimics the initial secret management topology.

Abstract: A method carried out by a first device includes initiating an authentication session for authenticating a user of the first device with N second devices and with a third device, obtaining an asymmetric key pair comprising a public key and a private key, obtaining an identifier for the authentication session from the third device, transmitting the identifier and the public key to the second devices, receiving first data from the user and carrying out user authentication with the third device based on the first data, obtaining a respective challenge from each of the second devices, for each challenge, signing the challenge with the private key and sending the signed challenge to the respective second device the challenge was received from, receiving a message indicative of successful user authentication from each second device.

Abstract: Methods, systems and computer program products are described to improve machine learning (ML) model-based classification of data items by identifying and removing inaccurate training data. Inaccurate training samples may be identified, for example, based on excessive variance in vector space between a training sample and a mean of category training samples, and based on a variance between an assigned category and a predicted category for a training sample. Suspect or erroneous samples may be selectively removed based on, for example, vector space variance and/or prediction confidence level. As a result, ML model accuracy may be improved by training on a more accurate revised training set. ML model accuracy may (e.g., also) be improved, for example, by identifying and removing suspect categories with excessive (e.g., weighted) vector space variance. Suspect categories may be retained or revised. Users may (e.g., also) specify a prediction confidence level and/or coverage (e.g., to control accuracy).

Abstract: A method of securing input data using random number data for a security keypad according to the present invention includes (a) a step of generating randomly server random number data by a main server, (b) a step of generating, by a client, client random number data corresponding to each input character input through a security keypad from a random number table generated by using the server random number data, and (c) a step of generating, by the main server, final random number data and a final random number table by using the client random number data, and extracting and generating plain text data from the final random number table.

Abstract: A computer implemented method includes receiving, at device that includes a locked basic input/output system (BIOS), a support service generated one-time code based on a private key and a support service counter, validating the device one-time code based on a public key associated with the private key and a device counter, and unlocking the BIOS of the device using the device one-time code.

Abstract: According to various embodiments, a data processing device is provided including a memory configured to represent each data word of a plurality of data words in the form of at least two respective shares, a logic circuit, an input circuit configured to provide input shares to the logic circuit depending on a control sequence specifying a sequence of real operations and dummy operations, wherein the logic circuit is configured to process the input shares to generate at least two processing result shares according to a predetermined logic function and an output circuit configured to output the at least two processing result shares if the control sequence specifies the current operation as a real operation and refresh the at least two shares of the one of the data words with the processing result shares if the control sequence specifies the current operation as a dummy operation.

Abstract: In one aspect, a computerized method for detecting data abuse and data exfiltration in a data store or a data lakes cloud warehouse, comprising: identifying a plurality of Command and control (CnC) channels in an enterprise data cloud infrastructure; identifying and detecting malicious compressed data transfers and encrypted data transfers; implementing a destination analysis from within the data store; and implementing data abuse detection and prevention operations.

Abstract: A message authentication system for a vehicle network includes a private communication system including one or more private nodes in electronic communication with one another. The message authentication system also includes a public communication system including a plurality of public nodes in electronic communication with one another. The plurality of public nodes includes a security proxy node and one or more receiving nodes. The security proxy node authenticates one or more unique messages transmitted by a private node of the private communication system to the one or more receiving nodes of the public communication system.