Abstract: A system and method that authenticates the integrity of digital images and videos by analyzing backend microdata to detect alterations, filters, or AI-generated manipulations. This system provides a comparison of the original and modified states of digital media, assess the authenticity of the content, and confirm the identity of depicted subjects, providing a critical tool against misinformation and unauthorized media manipulation.

Abstract: Disclosed are embodiments for automatically resolving faults in a complex network system. Some embodiments monitor one or more of system operational parameter values and message exchanges between network components. A machine learning model detects a fault in the complex network system, and an action is selected based on a cause of the fault. After the action is applied to the complex network system, additional monitoring is performed to either determine the fault has been resolved or additional actions are to be applied to further resolve the fault.

Abstract: The present invention provides a robust and effective solution to an entity or an organization for fully ensuring people and property security by designing and developing an intelligent access control system (ACS) that can provide a smart, swift and simplified user authentication and authorization mechanism. This proposed system may be an event-driven system. A plurality of events such as location-centric, people-inspired, unplanned, and the like can be captured and acted upon by using artificial intelligence along with an adaptive control system.

Abstract: There is provided a method for detecting cyber-attacks at edge servers. The method comprises receiving network traffic. The method comprises extracting and normalizing network flow features from the network traffic to produce a data pattern for evaluation. The method comprises computing an anomaly detection score for the data pattern for evaluation. The method comprises comparing the anomaly detection score with a threshold and determining if the network traffic corresponds to normal traffic or to an anomaly. The method comprises, upon determining that the network traffic corresponds to an anomaly, mitigating malicious network traffic by triggering a mitigation strategy and sending an anomaly message to an anomaly classifier. A method for classifying cyber-attacks at a cloud server is also provided.

Abstract: Disclosed embodiments are related to Management Data Analytics (MDA) relation with Self-Organizing Network (SON) functions and coverage issues analysis use case. An MDA Service (MDAS) obtains input data related to one or more managed networks and services from one or more data sources; generates an analytics report based on analysis of the input data; and sends an analytics report to a Self-Organizing Network (SON) function for root cause analysis of ongoing issues, prevention of potential issues, and/or prediction of network or service demands. The analytics report may describe an identified network or cell coverage issue related to the SON function. Other embodiments may be described and/or claimed.

Abstract: In one embodiment, an agent executed on a device receives performance metrics regarding a transport layer of the device. The agent sends the performance metrics to an application executed on the device. The application makes, based on the performance metrics, a determination indicating one or more adjustments to a packet flow of a plurality of packet flows sent by the application. The application, based on the determination, sends an adjusted packet flow according to the one or more adjustments as part of the plurality of packet flows.

Abstract: Techniques described herein for extended detection and response to security anomalies in computing networks can perform automated analysis of anomalies occurring in different telemetry sources in a computer network, in order to synthesize the anomalies into analyst work units that are surfaced for further analysis by security response teams. Anomalies can initially be processed in order to identify and collect extended anomaly data. The extended anomaly data can then be used to group the anomalies according to a multi-stage grouping process which produces analyst work units. The analyst work units can be processed to produce analyst summaries that assist with analysis and response. Furthermore, the analyst work units can be prioritized for further analysis, and analyst interactions with the prioritized analyst work units can be used to influence subsequent anomaly grouping operations.

Abstract: There is described a computer-implemented method of forwarding contact data associated with a potential customer. The method comprising has: receiving customer purchase data from the potential customer, the customer purchase data comprising the contact data and mortgage preference data; publishing a purchase interest notification on an Internet-based live data stream accessible by a plurality of lenders via Internet, the purchase interest notification including the mortgage preference data of the customer purchase data; receiving a plurality of interest notices associated with the purchase interest notification from interested ones of the plurality of lenders; and forwarding the contact data of the potential customer to at least one privileged lender based on said reception.

Abstract: A system and method for detecting HTTPS flood cyber-attacks. A method includes deriving traffic features from incoming traffic directed to a protected entity; determining if the derived traffic features represent at least one traffic anomaly, wherein the traffic anomaly is a deviation from at least one baseline, wherein the baseline is a normal distribution of traffic features of legitimate incoming traffic; upon determining that the derived traffic features represent at least one anomaly, determining if the anomaly characterizes an on-going HTTPS flood cyber-attack; upon determining that there is the on-going HTTPS flood cyber-attack, populating a list of suspect source internet protocol (IP) addresses of devices triggered detection of the anomaly; challenging each device in the list of suspect source IP addresses to determine if a challenged device is an attack tool; and causing execution of a mitigation action on each client device determined to be an attack tool.

Abstract: A system and method that authenticates the integrity of digital images and videos by analyzing backend microdata to detect alterations, filters, or AI-generated manipulations. This system provides a comparison of the original and modified states of digital media, assess the authenticity of the content, and confirm the identity of depicted subjects, providing a critical tool against misinformation and unauthorized media manipulation.

Abstract: A client locates a server in a computer network without using the Domain Name System (DNS). The client transmits a request User Datagram Protocol (UDP) packet that includes a locating pattern. Responsive to detecting the locating pattern in the request UDP packet, a monitor that monitors communication of the client informs the server of the Internet Protocol (IP) address and port number of the client. Responsive to receiving the IP address and port number of the client, the server sends the client a response UDP packet that includes the locating pattern and the IP address and port number of the server. The client uses the IP address and port number of the server from the response UDP packet to communicate with the server.

Abstract: The technology provides for live migration from a first cluster to a second cluster. For instance, when requests to one or more cluster control planes are received, a predetermined fraction of the received requests may be allocated to a control plane of the second cluster, while a remaining fraction of the received requests may be allocated to a control plane of the first cluster. The predetermined fraction of requests are handled using the control plane of the second cluster. While handling the predetermined fraction of requests, it is detected whether there are failures in the second cluster. Based on not detecting failures in the second cluster, the predetermined fraction of requests allocated to the control plane of the second cluster may be increased in predetermined stages until all requests are allocated to the control plane of the second cluster.

Abstract: An apparatus includes a transceiver to support a media flow involving a user equipment and an Internet Protocol (IP) Multimedia Subsystem (IMS) network that are connected via a media path that traverses a first realm associated with the user equipment, a second realm, and a third realm associated with the IMS network. In some cases, the apparatus includes a processor to establish a first context to perform interworking between the first realm and the second realm in response to an offer message from the user equipment. The processor later de-allocates the first context in response to receiving an answer message indicating that a second context performs interworking between the first realm and the third realm. In other cases, the processor bypasses allocation of a context to perform interworking between the second realm and the third realm in response to an indication that the media flow is anchored on an incoming side.

Abstract: A method, computer system, and a computer program product are provided for a restoring missing content to a user that was absent during a portion of a live event. The process will identify the absence period and that is being participated by a user and obtains extracted information relating to the user that was previously gathered from a variety of sources including past user interactions and a user profile. This information is further analyzed and prioritized according to user interest priority determined by the extracted information. This information is categorized into a first set of domains. Information provided during the absence of the user will also be captured and categorized into a second set of domain categories. An intersection between the first and second set of domain categories will be found and prioritized by user interest. This will be presented to the user upon user's return.

Abstract: One embodiment provides a method, the method including: identifying, at an information handling device and utilizing a security encryption system, a virtual meeting invitation; recording, utilizing the security encryption system, the virtual meeting responsive to at least one participant accessing the virtual meeting via the virtual meeting invitation; encrypting, utilizing the security encryption system, the recording of the virtual meeting; and storing, after the encrypting, the encrypted recording of the virtual meeting in a storage system. Other aspects are claimed and described.

Abstract: Instead of a joint connector, a function substitution unit is attached to a position where a plurality of communication lines of systems of a wire harness are concentrated. The function substitution unit includes a plurality of terminals for connection of CAN buses of a plurality of systems, and detects and blocks an unauthorized signal sent from an unauthorized device by distinguishing a position of each terminal from a region of a path through which a CAN signal passes.

Abstract: Disclosed embodiments can pertain to utilizing biometric behavior to prevent inappropriate entry of sensitive information. Current biometric behavior of a user, specific to the user's interaction with an electronic form, can be acquired and compared to benchmark biometric behavior of the user associated with past interaction with the electronic form to create a comparison result. A similarity score based on the comparison result can then be established. It can be inferred that sensitive information was incorrectly entered into the electronic form when the similarity score satisfies a predetermined similarity threshold. The sensitive information can be identified, and a machine learning model can be triggered to generate a risk score based on the similarity score and the identified sensitive information. A user can be prompted to redact incorrectly entered sensitive information when the risk score satisfies a predetermined risk threshold.

Abstract: The invention relates to a method detecting one or more anomalies regarding logins of a user on an authentication system. The method includes at least one iteration of a monitoring phase that includes collecting a log of successful logins of the user on the authentication system, and calculating, for each monitored parameter, a probability density, in the log, of each predetermined value of the parameter. The method also includes calculating, for each parameter, a weight, as a function of the probability density of each predetermined value of the parameter, calculating an anomaly score for the log as a function of the weights and the probability densities; and comparing the anomaly score to a given threshold in order to determine an anomaly in the daily log for the user. The invention also relates to a computer program product and a device configured to carry out the method.

Abstract: A technology for controlling network access based on a tunnel and a data flow in a network environment, including a node to detect, through an access control application, a network access event in which a target application accesses a destination network; check, through the access control application, whether or not there is a tunnel generated in a unit of nodes or IPs and applied from an external server, and whether or not there is a data flow generated in a unit of TCP sessions or applications and generated by the external server; if there is the applied tunnel and data flow, transmit a data packet of the target application through the applied tunnel by using a communication circuit; and if there is no applied tunnel or data flow, drop a data packet of the target application.

Abstract: A system for step-up authentication using a spoken passphrase includes a conversational interface to: receive a conversational request for an action which requires step-up authorization; respond to the user through conversational artificial intelligence (AI) warning the user that an additional step is required; and a user mobile device to: receive, over a communication channel between a datacenter and the mobile device, to the user and different than the conversational interface, a secret passphrase generated using a spoken passphrase dictionary; wherein the conversational interface is further to receive a spoken submission from the user in response to the warning; wherein the datacenter confirms validity of the received spoken submission by comparing the spoken submission to the passphrase; and wherein the conversational interface is further to, in response to confirmation of the spoken submission, authorize the requested action.