Abstract: Provided are a method and system of providing personal information on the basis of a blockchain. The blockchain-based personal information providing method includes making a data privacy-related contract with a user and providing user data, which corresponds to personal information of the user according to the data privacy-related contract, to a service for accessing the user data using a contract with the service.

Abstract: Provided is a system for blocking a phishing attack including: a phishing attack prevention storage device; wherein a user terminal or a service server is connected with the phishing attack prevention storage device via a network, wherein a storage area in the phishing attack prevention storage device is mounted in a network drive at the user terminal or the service server, wherein when there is an open request for a real file stored in the storage area in the phishing attack prevention storage device from the user terminal or the service server, the phishing attack prevention storage device checks a storage operation mode and creates a fake file other than the open-requested original file when the storage operation mode corresponds to a list-only mode to return the fake file to the user terminal or the service server via the network.

Abstract: Data of a computer system can be secured from malware. During a Primary Operating System (PrimaryOS) run-time, the system determines if the computer system has been compromised and, if so, a Trusted Operating System (TrustedOS) is launched and assumes control of the hardware resources and the software resources of the computer system. The TrustedOS obtains a cryptographic key that is inaccessible to the PrimaryOS. The TrustedOS uses the cryptographic key to disable writing to a first portion of the storage media that includes the first set of logical block addresses. The PrimaryOS can incrementally back-up files to a second set of logical block addresses on a second portion of the storage media. Control of the hardware resources and the software resources is returned to the PrimaryOS.

Abstract: Systems and methods for tracking, collecting, processing, enriching, analyzing and reporting on data in the context of cyber security investigations are disclosed. According to one embodiment, in an information processing apparatus comprising at least one computer processor, a method for conducing cyber investigations may include: (1) receiving initiation of an investigative workflow comprising contextual information including at least one of a case, a data asset, a subject, and a threat; (2) collecting digital evidence from the data asset; (3) processing the digital evidence into structured data; (4) staging and enriching the structured data; (5) analyzing the enriched structured data; and (6) generating at least one report based on the analysis.

Abstract: Predictive rendering (also referred to herein as speculative rendering) is disclosed. The predictive rendering is performed by an endpoint browser in response to a user input made by a user. The predictive rendering is verified using a surrogate browser that is executed on a remote server. The verification can be performed asynchronously.

Abstract: The invention relates to a computer system and a method (100) for managing authorizations granted to a user client (2) from an aggregated interface (10) within the framework of unified governance of intensive computing solutions (70); the unified governance being ensured at least partly by an authorization management computer system (1) including: a proxy microservice (20), a token security microservice (30), at least one security repository (35, 36, 37), at least one authorization repository (40) and a computing microservice for each of the intensive computing solutions; said method including the steps of: Receiving (110) access information of a user client (2), Authenticating (120) the user client (2) and determining (130) at least one role attribute for the user client (2), Generating (140) an authentication token and determining (150) authorizations granted to the user client (2), by the at least one computing microservice.

Abstract: A method, computing device, and non-transitory machine-readable medium for detecting malware attacks and mitigating data loss. In various embodiments, an agent is implemented in the operating system of a storage node to provide protection at the bottommost level in a data write path. The agent intercepts write requests and observes file events over time to detect anomalous behavior. For example, the agent may monitor incoming write requests and, when an incoming write request is detected, determine whether the file is associated with a malware attack risk based on an analysis of an encryption state of data in the file.

Abstract: A request to execute an application at a secure cryptographic environment of a server may be received. A tag that has been assigned to the application may be received. An attribute of the server may be identified. A determination may be made as to whether the attribute of the server satisfies the tag that has been assigned to the application. In response to determining that the attribute of the server satisfies the tag that has been assigned to the application, an indication may be provided to execute the application at the secure cryptographic environment of the server.

Abstract: A method may include receiving, via a secure deployment management (SDM) system, data associated with operations of an industrial device from a SDM node associated with the industrial device. The data is received via a secure communication channel established by the SDM system with the SDM node and security protocols. The SDM node is communicatively coupled with a machine learning system for sending and receiving data. The machine learning system may generate an updated machine learning model based on the data and a machine learning model representative of expected outputs associated with the operations of the industrial device and generate updated configuration data based on the updated machine learning model. The method may then include receiving the updated configuration data from the SDM node via the secure communication channel and sending the updated configuration data to the industrial device without performing security operations on the updated configuration data.

Abstract: Enhanced electronic security systems and methods are provided. A whitelist, blacklist, or both of resource access sources that are allowed to use a particular resource access account are obtained. Upon detecting an access attempt to a particular resource on a computer network, a source of the access attempt and a resource access account used in the access attempt is identified. The whitelist, blacklist, or both are referenced to determine if the source of the access attempt is allowed to use the resource access account used in the access attempt. When the source of the access attempt is not allowed to use the resource access account used in the access attempt, one or more mitigation tasks may be performed.

Abstract: A secure processor, comprising a logic execution unit configured to process data based on instructions; a communication interface unit, configured to transfer of the instructions and the data, and metadata tags accompanying respective instructions and data; a metadata processing unit, configured to enforce specific restrictions with respect to at least execution of instructions, access to resources, and manipulation of data, selectively dependent on the received metadata tags; and a control transfer processing unit, configured to validate a branch instruction execution and an entry point instruction of each control transfer, selectively dependent on the respective metadata tags.

Abstract: Multimedia piracy detection (e.g., using a computerized tool) is enabled. A system can comprise a memory that stores executable instructions that, when executed by a processor, facilitate performance of operations, comprising: determining, based on a time domain and/or a frequency domain associated with original digital media content (e.g., and respective digital transportation) and using a counterfeit digital media content model, whether digital media content comprises a counterfeit of an authorized release of the original digital media content, wherein the counterfeit digital media content model has been generated based on machine learning applied to time domains and/or frequency domains of past original digital media content (e.g., and respective digital transportation) and to past digital media content (e.g., counterfeit digital media content) (e.g.

Abstract: A system and method for digital smart wallet communications that operates by managing separately-owned, private blockchains to reduce processing times, eliminate proof of work burdens, and retain blockchain immutable security while allowing protection of confidential information contained on each blockchain. The system and method may further comprise auditability of blockchains, and may be operated on an integrated communications platform that allows seamless interoperability of communication devices across multiple modes of communication, and automates digital smart wallet transactions.

Abstract: A method for transmitting ticket information to user devices based on interactions of the user devices with a ticket system, is disclosed. The method involves identifying interactions of a first user device and a second user device with the ticket system within a predefined time period. The interactions are associated with ticket requests for a resource. Interaction scores are generated and updated based on the number of interactions. Upon interaction with the first user device, a first interface containing first ticket information is transmitted within the predefined time period, determined by the first interaction score. Simultaneously, in response to the second user device interaction, a second interface with second ticket information is transmitted, determined by the second interaction score. Notably, the second ticket information includes a second quantity of available tickets for the resource, which is lesser than a first quantity in the first ticket information.

Abstract: Systems and methods are shown for providing private local sponsored content selection and improving intelligence models through distribution among mobile devices. This allows greater data gathering capabilities through the use of the sensors of the mobile devices as well as data stored on data storage components of the mobile devices to create predicted models while offering better opportunities to preserve privacy. Locally stored profiles comprising machine intelligence models may also be used to determine the relevance of the data gathered and in improving an aggregated model for identifying the relevance of data and the selection of sponsored content items. Distributed optimization is used in conjunction with privacy techniques to create the improved machine intelligence models. Publishers may also benefit from the improved privacy by protecting the statistics of type or volume of sponsored content items shown with publisher content.

Abstract: Systems, devices, and methods are discussed for classifying a number of security policies in relation to criteria for applying those security policies to yield a dual bitmap scheme representing a correlation between security policies and one or more criteria.

Abstract: Techniques are provided for detecting compromised web pages in a runtime environment. A first version of a web page is retrieved and loaded in a browser comprising a browser extension configured to detect event listeners added when web pages are loaded by the browser. First data is generated describing a first set of event listeners detected by the browser extension when the first version of the web page is loaded. At a second time a second version of the web page is retrieved and loaded in the browser. Second data is generated describing a second set of event listeners detected by the browser extension when the second version of the web page is loaded. It is determined that the web page is compromised based on comparing the first data and the second data. In response to determining that the web page is compromised, a threat response action is performed.

Abstract: A control system (10) includes plural sensors (14), plural actuators (16), and a controller (18). An information processing apparatus (2000) acquires configuration information representing a configuration of the control system (10), a control rule representing a rule of control of each actuator (16) by the controller (18), and behavior log data indicating a combination of time-series data of an observed value of the sensor (14), and a state of each actuator (16) at each time. The information processing apparatus (2000) generates, for each combination of states of the actuators (16) and for the each sensor (14), a behavioral function representing a temporal change of the observed value of the sensor (14) regarding the combination of states of the plural actuators, using the behavioral log data, and generates a system model of the control system (10) using the configuration information, the control rule, and the behavioral function.

Abstract: A system includes a processing unit, a memory configured to store at least one first group of instructions and one second group of instructions for execution by the processing unit, the processing unit being configured to sequentially extract from the memory instructions of the first group and instructions of the second group for their execution. The system also includes a controller including a first auxiliary memory configured to store a protection criterion, a comparator configured to compare the storage address of each extracted instruction with the protection criterion, and a control circuit configured to, in response to the storage address meeting the protection criterion, trigger a protection mechanism including at least one prohibition for the processing unit to execute again at least one portion of the instructions of the first group, during the execution of the instructions of the second group.

Abstract: Systems and methods for network security are provided. Various embodiments of the present technology provide an integrated security platform that combines PAM, CASB, identity access management, and multi-factor authentication onto one platform. This integration allows for a frictionless deployment that can be utilized by companies that may not have large teams of system administrators. As such, some embodiments provide a gateway solution and a proxy solution that is easy to deploy. The user equipment (e.g., computer, phone, point of sale terminal, etc.) can be used as a gateway. An agent can be included on each endpoint that combines gateway functionality of PAM and web rewrite and proxy functionality of a CASB deployment into an endpoint solution.