Abstract: Systems and methods for data exfiltration prevention is provided. In some embodiments, exfiltration detection includes receiving an algorithm and a data set within a secure computing node. The algorithm is trained on the data set to generate a set of weights. A determination is made if the algorithm originated from a trusted source. When it is a trusted source, an unintentional data exfiltration analysis is performed. Conversely, when the source is not known to be trusted an intentional data exfiltration analysis is performed. Unintentional data exfiltration analysis is considerably more computationally intensive, and as such, making this determination can save significantly on computational resources. If an exfiltration event is identified, the system prevents exporting of the set of weights; otherwise the set of weights can be provided back to the algorithm developer.

Abstract: A vacuum therapy device for treatment of a defect internal of a human or animal body, the device comprising: a suction tube extending from: (i) a proximal portion for coupling to a source of negative pressure outside the body, to (ii) a distal portion for providing suction proximal to the defect when inserted into the body; a porous medium coupled to the distal portion of the suction tube to provide suction to the defect when inserted into the body for treatment thereof; and a constraining sleeve for selective compression of the porous medium, the constraining sleeve having a proximal end and a distal end, wherein the constraining sleeve is movable relative to the porous medium between: an insertion position in which the proximal and distal ends of the sleeve are arranged at the distal portion of the suction tube so that the sleeve at least partially surrounds the porous medium to retain the porous medium in a compressed state during insertion into the body; and a treatment position in which the porous medium

Abstract: A light engine and system are disclosed in which the light engine contains a core comprising an opening extending through opposing surfaces and a flexible printed circuit board (PCB). The PCB includes a flexible body disposed on an outside of the core and having independently addressable sets of illumination sources mounted thereto, and flexible legs extending from the body and through the opening. The legs are bent such that a terminal portion of each leg is substantially parallel to the opposing surfaces of the core. Independent control of the sets of illumination sources is provided via the legs. The body is separated into segments, each on a different section of the outside and containing body contacts electrically independent of the body contacts of each other segment. Each leg is associated with a different segment, and contains leg contacts on the terminal portion in electrical contact with the associated body contacts.

Abstract: Systems and methods for providing algorithm performance feedback to an algorithm developer is provided In some embodiments, an algorithm and a data set are receiving within a secure computing node. The data set is processed using the algorithm to generate an algorithm output. A raw performance model is generated by regression modeling the algorithm output. The raw performance model is then smoothed to generate a final performance model, which is then encrypted and routed to an algorithm developer for further analysis. The performance model models at least one of the algorithm's accuracy, F1 score accuracy, precision, recall, dice score, ROC (receiver operator characteristic) curve/area, log loss, Jaccard index, error, R2 or by some combination thereof. The regression modeling includes linear least squares, logistic regression, deep learning or some combination thereof.

Abstract: Systems and methods for providing algorithm performance feedback to an algorithm developer is provided In some embodiments, an algorithm and a data set are receiving within a secure computing node. The data set is processed using the algorithm to generate an algorithm output. A raw performance model is generated by regression modeling the algorithm output. The raw performance model is then smoothed to generate a final performance model, which is then encrypted and routed to an algorithm developer for further analysis. The performance model models at least one of the algorithm's accuracy, F1 score accuracy, precision, recall, dice score, ROC (receiver operator characteristic) curve/area, log loss, Jaccard index, error, R2 or by some combination thereof. The regression modeling includes linear least squares, logistic regression, deep learning or some combination thereof.

Abstract: Systems and methods for federated localized feedback and performance tracking of an algorithm is provided. An encrypted algorithm and data are provided to a sequestered computing node. The algorithm is decrypted and processes the protected information to generate inferences from dataframes which are provide to an inference interaction server, which performs feedback processing on the inference/dataframe pairs. Further, a computerized method of secure model generation in a sequestered computing node is provided, using automated multi-model training, leaderboard generation and then optimization. The top model is then selected and security processing on the selected model may be performed. Also, systems and methods are provided for the mapping of data input features to a data profile to prevent data exfiltration. Data consumed is broken out by features, and the features are mapped to either sensitive or non-sensitive classifications.

Abstract: Confirmation of data selection in a zero-trust environment is provided. In some embodiments, a synthetic data steward and/or a traditional data steward can receive the dataset(s). Additionally, a script is received from the algorithm developer. The dataset(s) and script(s) reside within a secure computing node and are therefore inaccessible by any party. The script(s) are executed, resulting in at least one confirmation about the data within the dataset(s). The script(s) complete any of confirming a format for data in the at least one dataset, the expected class values for data within the at least one dataset, an overall characterization and completeness of the at least one dataset, and/or an expected class membership for different data attributes within the at least one dataset.

Abstract: Systems and methods for the amalgamation of data from different sources for processing by an algorithm is provided. A synthetic data steward receives an encrypted algorithm from the algorithm developer via a core management system. Likewise, two or more data stewards may encrypt their data sets and provide them to the synthetic data steward. The sensitive data being operated upon is compiled into a unified/amalgamated dataset. Within the synthetic data steward is a sequestered computing node. This allows the algorithm and the various sensitive data sets to be decrypted within the sequestered computing node, and computations be performed on the amalgamated data, without the synthetic data steward (or any party for that matter) from having access to the algorithm and/or sensitive data sets while ‘sealed’ in the vault like sequestered computing node.

Abstract: Systems and methods for data obfuscation are provided. Data obfuscation is needed when protecting an algorithm from reverse engineering attempts. The data is obfuscated by requesting more data from the data steward than is needed by the algorithm. If there are not enough types of data available from the data steward, “low intensity” data types can be requested to fill out the data types requested. These ‘low intensity’ data types are ones that are easily obtained or even regularly collected anyway. The algorithms libraries are altered to call for all the data fields available, thereby rendering reverse engineering extremely difficult, if not impossible.

Abstract: Systems and methods for the validation and transform of data for processing by an algorithm is provided. In some embodiments, input data is cleaned, and then the domain of the data is determined. The domain of the data refers to the data type. A validation of the data occurs. The validation is for the ranges and distribution that the data should have, according to the domain, versus the actual data ranges and distribution. Data that fails the validation undergo a transform step and then are re-validated. This process is iterative until the data set passes validation. Transforms are first selected based upon the data domain that was determined prior. Transforms that fit a range requirement, or a distribution type may be selected. In alternate embodiments, machine learning (ML) may be employed to train models, exclusive to a given domain, to identify needed transforms.

Abstract: A system for passively exhausting air from a structure includes at least one pair of modules arranged on a roof of the structure. Each module has an exhaust face on one side and a sloped surface on the opposite side, and can receive exhaust air that flows upward from inside the structure. The modules can be arranged in pairs facing one another, with one of the sloped surfaces facing a direction of an environmental flow of air, so that the environmental air can flow up the sloped surface of one module and down the sloped surface of the other module without impinging on the exhaust faces of either module. The pairs can also be arranged side-by-side in an array, which can be expanded with additional pairs of modules to exhaust from the structure at a greater rate.

Abstract: A data center can include at least one computing room, and at least one rack system disposed in the computing room. The rack system includes a rack housing and a plurality of computing devices mounted to the rack housing. The data center can further include a cooling system that includes at least one surface that is wetted with a liquid, and delivers source air across the at least one surface such that heat is transferred from the source air to the liquid so as to produce cold air. The cold air then flows into a cold air aisle and is received in the computing devices so as to cool the computing devices.

Abstract: A trim cooling assembly provides a sensible trim cooling capability for intake air provided to a downstream computing pod that includes an air cooling system that provides cooling air to computer systems in the pod. The air cooling system can evaporatively chill received intake air to provide the cooling air. The trim cooling assembly is mounted externally to the computing pod and upstream of the air cooling system and includes one or more trim cooling units that can be individually controlled to provide adjustable sensible chilling of the intake air. The trim cooling units and an evaporative cooling unit in the air cooling system can be controlled to provide various levels of sensible and evaporative cooling to maintain conditions of air downstream of the evaporative cooling unit within certain ranges. Trim cooling units can be progressively activated and de-activated in stages to provide progressively adjusted sensible cooling.

Abstract: A data center can include at least one computing room, and at least one rack system disposed in the computing room. The rack system includes a rack housing that at least substantially encapsulates an interior space, and a plurality of computing devices mounted to the rack in the interior space. The data center can further include a cooling system. The cooling system includes a conduit that is disposed in the interior space of the rack housing and a fluid that flows through the conduit, wherein heat is transferred from air in the interior space to the fluid to produce cooled air in the rack housing.

Abstract: A system for passively exhausting air from a structure includes at least one pair of modules arranged on a roof of the structure. Each module has an exhaust face on one side and a sloped surface on the opposite side, and can receive exhaust air that flows upward from inside the structure. The modules can be arranged in pairs facing one another, with one of the sloped surfaces facing a direction of an environmental flow of air, so that the environmental air can flow up the sloped surface of one module and down the sloped surface of the other module without impinging on the exhaust faces of either module. The pairs can also be arranged side-by-side in an array, which can be expanded with additional pairs of modules to exhaust from the structure at a greater rate.

Abstract: A preheat damper preheats ambient air being directed to an air handling unit of a data center to mitigate ice accumulation caused by the ambient air. The ambient air can be preheated upstream of a mist eliminator, which removes moisture from the ambient air upstream of the air handling unit, to mitigate ice accumulation in the mist eliminator. The preheat damper directs exhaust air from an exhaust air plenum. The preheat damper can be adjusted based on the ambient temperature, and can be upstream of a return damper which directs exhaust air from the exhaust air plenum based on characteristics of the cooling air supplied to cool data center equipment. The return damper can be adjusted in counter-opposition with one or more intake dampers to maintain cooling air characteristics, and concurrently with the preheat damper to direct ambient air to the air handling unit through the exhaust air plenum.

Abstract: A system for passively exhausting air from a structure includes at least one pair of modules arranged on a roof of the structure. Each module has an exhaust face on one side and a sloped surface on the opposite side, and can receive exhaust air that flows upward from inside the structure. The modules can be arranged in pairs facing one another, with one of the sloped surfaces facing a direction of an environmental flow of air, so that the environmental air can flow up the sloped surface of one module and down the sloped surface of the other module without impinging on the exhaust faces of either module. The pairs can also be arranged side-by-side in an array, which can be expanded with additional pairs of modules to exhaust from the structure at a greater rate.

Abstract: A data center can include at least one computing room, and at least one rack system disposed in the computing room. The rack system includes a rack housing and a plurality of computing devices mounted to the rack housing. The data center can further include a cooling system that includes at least one surface that is wetted with a liquid, and delivers source air across the at least one surface such that heat is transferred from the source air to the liquid so as to produce cold air. The cold air then flows into a cold air aisle and is received in the computing devices so as to cool the computing devices.

Abstract: A data center row infrastructure module enables rapid deployment of a computing room enclosure for computer systems that provides intake air circulation to, and exhaust air removal from, the computer systems in the enclosure. The data center row infrastructure module includes free-standing exhaust plenum structures encompassing opposite sides of the enclosure and a plenum module spanning a top end of the enclosure between the free-standing exhaust plenum structures. Each free-standing exhaust plenum structure includes an internal exhaust air plenum that directs exhaust air received from the enclosure through an exhaust air outlet on a top end of the free-standing exhaust plenum structure. The plenum module establishes a bottom end of a cooling air plenum above and separate from the enclosure and between the free-standing exhaust plenum structures. Some plenum modules can direct cooling air directly to the enclosure as intake air.

Abstract: Methods for and systems of controlling operation of one or more chillers in a primary-secondary chiller plant system. The chillers utilize a set point temperature that is based upon measuring a temperature of water at a supply side of the load on the secondary loop.